Overview

overview

8

Static

static

3

1111-w-war...er.exe

windows10-2004-x64

8

1111-w-war...er.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    35s
  • max time network
    153s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    07/07/2026, 12:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    1111-w-warp-2024.12.760.0-installer.exe
  • Size 2.0MB
  • Sample260707-pdvsqaew2j
  • SHA256 148dc944649f15c49e246feee7aa21695ec5770ff8bc038aa91d3a87fe68d5b6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoveryinstallerpersistencespyware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Executes dropped EXE 1 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

    Inno Setup installer

    installer
  • Checks SCSI registry key(s) 3 TTPs 42 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 16 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 12 IoCs
  • Suspicious use of FindShellTrayWindow 7 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\1111-w-warp-2024.12.760.0-installer.exe
    "C:\Users\Admin\AppData\Local\Temp\1111-w-warp-2024.12.760.0-installer.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1256
    • C:\Users\Admin\AppData\Local\Temp\is-G5M179DLR9.tmp\1111-w-warp-2024.12.760.0-installer.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-G5M179DLR9.tmp\1111-w-warp-2024.12.760.0-installer.tmp" /SL5="$602D8,848247,840704,C:\Users\Admin\AppData\Local\Temp\1111-w-warp-2024.12.760.0-installer.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Checks processor information in registry
      • Suspicious behavior: EnumeratesProcesses
      PID:2668
      • C:\Users\Admin\AppData\Local\Temp\is-PFIB2WKVMF.tmp\component0_extract\saBSI.exe
        "C:\Users\Admin\AppData\Local\Temp\is-PFIB2WKVMF.tmp\component0_extract\saBSI.exe" /affid 91082 PaidDistribution=true CountryCode=GB InstallID=GnjW1demeOx0kZlQAEt7yktGdZByj2dRFU9C3q6ofyWGWfxfWVqAwoPEiUmydWEAIWCubX6pzX9R6Iap6wP
        3⤵
          PID:1696
          • C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe
            "C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe" /install /affid 91082 PaidDistribution=true InstallID=GnjW1demeOx0kZlQAEt7yktGdZByj2dRFU9C3q6ofyWGWfxfWVqAwoPEiUmydWEAIWCubX6pzX9R6Iap6wP saBsiVersion=4.1.1.865 CountryCode=GB /no_self_update
            4⤵
              PID:4372
              • C:\ProgramData\McAfee\WebAdvisor\saBSI\installer.exe
                "C:\ProgramData\McAfee\WebAdvisor\saBSI\\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade
                5⤵
                  PID:5268
                  • C:\Program Files\McAfee\Temp2187576362\installer.exe
                    "C:\Program Files\McAfee\Temp2187576362\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade
                    6⤵
                      PID:5420
              • C:\Users\Admin\AppData\Local\Temp\is-PFIB2WKVMF.tmp\component1_extract\OperaSetup.exe
                "C:\Users\Admin\AppData\Local\Temp\is-PFIB2WKVMF.tmp\component1_extract\OperaSetup.exe" --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:a,utm.id:agiSfNdEgbgI9VtZEQqqw9CBuPzvHYrprLPHvLxMqKccd3OC7AToqaYTOpnT0HhptlFWnuh6pGrI8ylx3J
                3⤵
                  PID:4236
                  • C:\Users\Admin\AppData\Local\Temp\7zSC807734A\installer.exe
                    C:\Users\Admin\AppData\Local\Temp\7zSC807734A\installer.exe --silent --allusers=0 --otd=utm.medium:apb,utm.source:ais,utm.campaign:a,utm.id:agiSfNdEgbgI9VtZEQqqw9CBuPzvHYrprLPHvLxMqKccd3OC7AToqaYTOpnT0HhptlFWnuh6pGrI8ylx3J --server-tracking-blob=ZWY4ZTc2MDNhYmMyOGRmMWU1YzI2MmRlMjQwM2RhNzRmMzA5Yzc1OTNlYmY3YWY1YTE1YTEyZGFmZGY2YjI0OTp7ImNvdW50cnkiOiJVUyIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijoib3BlcmEiLCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cyIsInRpbWVzdGFtcCI6IjE3ODMwNzY0MTUuNDcxMSIsInVzZXJhZ2VudCI6InB5dGhvbi1yZXF1ZXN0cy8yLjMyLjMiLCJ1dG0iOnt9LCJ1dWlkIjoiZmU2ZTU0MjAtZWMzOC00YzhjLTg4ODgtZTlhNmJhZDUxZjY1In0=
                    4⤵
                      PID:4192
                      • C:\Users\Admin\AppData\Local\Temp\7zSC807734A\installer.exe
                        C:\Users\Admin\AppData\Local\Temp\7zSC807734A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x2b4,0x2b8,0x2bc,0x294,0x2c0,0x7ff6b84aad88,0x7ff6b84aad94,0x7ff6b84aada0
                        5⤵
                          PID:1848
                        • C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\installer.exe
                          "C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\installer.exe" --version
                          5⤵
                            PID:5532
                          • C:\Users\Admin\AppData\Local\Temp\7zSC807734A\installer.exe
                            "C:\Users\Admin\AppData\Local\Temp\7zSC807734A\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=4192 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_20260707131452" --session-guid=30db5c17-3338-4f9a-b7b6-76b16a25b478 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=FC08000000000000
                            5⤵
                              PID:4620
                              • C:\Users\Admin\AppData\Local\Temp\7zSC807734A\installer.exe
                                C:\Users\Admin\AppData\Local\Temp\7zSC807734A\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x2ac,0x2b0,0x2c0,0x288,0x2c4,0x7ff6b84aad88,0x7ff6b84aad94,0x7ff6b84aada0
                                6⤵
                                  PID:5008
                                • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe" --backend --initial-pid=4192 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521" --session-guid=30db5c17-3338-4f9a-b7b6-76b16a25b478 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=133.0.5932.24
                                  6⤵
                                    PID:912
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe
                                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff6a91dad88,0x7ff6a91dad94,0x7ff6a91dada0
                                      7⤵
                                        PID:3152
                                      • C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\assistant\assistant_installer.exe
                                        "C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
                                        7⤵
                                          PID:2916
                                          • C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\assistant\assistant_installer.exe
                                            "C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x294040,0x29404c,0x294058
                                            8⤵
                                              PID:1840
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                                              8⤵
                                                PID:2800
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                                                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x564040,0x56404c,0x564058
                                                  9⤵
                                                    PID:940
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                                                    9⤵
                                                      PID:3184
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                        10⤵
                                                          PID:4424
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                            C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x244,0x248,0x250,0x240,0x2a0,0x7ff8df794fe0,0x7ff8df794ff0,0x7ff8df795000
                                                            11⤵
                                                              PID:5292
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                            10⤵
                                                              PID:4376
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ff8df794fe0,0x7ff8df794ff0,0x7ff8df795000
                                                                11⤵
                                                                  PID:5076
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x29c,0x298,0x2a8,0x28c,0x2ac,0x149c830,0x149c83c,0x149c848
                                                                10⤵
                                                                  PID:4276
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                    11⤵
                                                                      PID:4168
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x244,0x248,0x29c,0x240,0x2a0,0x7ff8df794fe0,0x7ff8df794ff0,0x7ff8df795000
                                                                        12⤵
                                                                          PID:568
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                        11⤵
                                                                          PID:2964
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ff8df794fe0,0x7ff8df794ff0,0x7ff8df795000
                                                                            12⤵
                                                                              PID:5240
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                            11⤵
                                                                              PID:3428
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x2b0,0x2b4,0x2b8,0x2ac,0x2bc,0x7ff8df794fe0,0x7ff8df794ff0,0x7ff8df795000
                                                                                12⤵
                                                                                  PID:5072
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\de932af914ba00303d4a2778a383ac9c831101e2.crx"
                                                                        7⤵
                                                                          PID:5764
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ff8df794fe0,0x7ff8df794ff0,0x7ff8df795000
                                                                            8⤵
                                                                              PID:964
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,12234538402428630068,4933928368898374870,262144 --field-trial-handle=1912,i,11054549101247664929,1685491112314213267,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,2045387498256358137,5835304272581395712,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1908 /prefetch:2
                                                                              8⤵
                                                                                PID:4312
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2128,i,7953493926679773126,5583363547081921794,524288 --field-trial-handle=1912,i,11054549101247664929,1685491112314213267,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,2045387498256358137,5835304272581395712,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2308 /prefetch:11
                                                                                8⤵
                                                                                • System Time Discovery
                                                                                PID:5832
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2464,i,16805635091604685952,11002950536357917101,524288 --field-trial-handle=1912,i,11054549101247664929,1685491112314213267,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,2045387498256358137,5835304272581395712,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2748 /prefetch:13
                                                                                8⤵
                                                                                  PID:3324
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3812,i,12148209137254253532,3812326444471298209,2097152 --field-trial-handle=1912,i,11054549101247664929,1685491112314213267,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,2045387498256358137,5835304272581395712,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3912 /prefetch:9
                                                                                  8⤵
                                                                                    PID:5104
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3448,i,8422230765257841776,584739040497471115,2097152 --field-trial-handle=1912,i,11054549101247664929,1685491112314213267,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,2045387498256358137,5835304272581395712,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3884 /prefetch:9
                                                                                    8⤵
                                                                                      PID:4820
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4232,i,14045102761101209029,14097649110212260211,524288 --field-trial-handle=1912,i,11054549101247664929,1685491112314213267,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,2045387498256358137,5835304272581395712,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3916 /prefetch:14
                                                                                      8⤵
                                                                                        PID:5640
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4404,i,11802081562971962731,8911493357499265368,2097152 --field-trial-handle=1912,i,11054549101247664929,1685491112314213267,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,2045387498256358137,5835304272581395712,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4464 /prefetch:9
                                                                                        8⤵
                                                                                          PID:4524
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4856,i,18236039510602462353,1389759348133853015,524288 --field-trial-handle=1912,i,11054549101247664929,1685491112314213267,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,2045387498256358137,5835304272581395712,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4868 /prefetch:12
                                                                                          8⤵
                                                                                            PID:1652
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5036,i,4385885788660818879,5901935147629084827,524288 --field-trial-handle=1912,i,11054549101247664929,1685491112314213267,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,2045387498256358137,5835304272581395712,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5060 /prefetch:14
                                                                                            8⤵
                                                                                              PID:5496
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4412,i,15084438799542937427,11676663709862396843,2097152 --field-trial-handle=1912,i,11054549101247664929,1685491112314213267,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,2045387498256358137,5835304272581395712,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4396 /prefetch:1
                                                                                              8⤵
                                                                                                PID:3236
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4324,i,15626483832141908019,9146860503699912441,524288 --field-trial-handle=1912,i,11054549101247664929,1685491112314213267,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,2045387498256358137,5835304272581395712,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4316 /prefetch:14
                                                                                                8⤵
                                                                                                  PID:6708
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                                                                                                7⤵
                                                                                                  PID:1616
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe
                                                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.24 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ff8df794fe0,0x7ff8df794ff0,0x7ff8df795000
                                                                                                    8⤵
                                                                                                      PID:6908
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,535904592787208403,5102824113613195633,262144 --field-trial-handle=2132,i,12079138367646580822,11643868750631344278,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,11852337818612403928,12983694512011715910,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2128 /prefetch:2
                                                                                                      8⤵
                                                                                                        PID:1448
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1904,i,9237732741644736057,13095664038671465756,524288 --field-trial-handle=2132,i,12079138367646580822,11643868750631344278,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,11852337818612403928,12983694512011715910,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2180 /prefetch:11
                                                                                                        8⤵
                                                                                                        • System Time Discovery
                                                                                                        PID:6808
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2412,i,15726097471262890030,11711047927308168400,524288 --field-trial-handle=2132,i,12079138367646580822,11643868750631344278,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,11852337818612403928,12983694512011715910,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2668 /prefetch:13
                                                                                                        8⤵
                                                                                                          PID:7084
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1844,i,4418130367998262410,1395044296404773725,524288 --field-trial-handle=2132,i,12079138367646580822,11643868750631344278,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,11852337818612403928,12983694512011715910,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3024 /prefetch:14
                                                                                                          8⤵
                                                                                                            PID:7088
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3000,i,11608321954609969755,10868159566333781274,524288 --field-trial-handle=2132,i,12079138367646580822,11643868750631344278,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,11852337818612403928,12983694512011715910,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3064 /prefetch:14
                                                                                                            8⤵
                                                                                                              PID:7144
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2988,i,109243478088458166,2139998753843464488,524288 --field-trial-handle=2132,i,12079138367646580822,11643868750631344278,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,11852337818612403928,12983694512011715910,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3044 /prefetch:14
                                                                                                              8⤵
                                                                                                                PID:6376
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3108,i,15982491894828864508,9203147334383803883,524288 --field-trial-handle=2132,i,12079138367646580822,11643868750631344278,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,11852337818612403928,12983694512011715910,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3152 /prefetch:14
                                                                                                                8⤵
                                                                                                                  PID:2508
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3136,i,8282311083589193711,109818082736120049,524288 --field-trial-handle=2132,i,12079138367646580822,11643868750631344278,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,11852337818612403928,12983694512011715910,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3192 /prefetch:14
                                                                                                                  8⤵
                                                                                                                    PID:7148
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3012,i,133109200442179607,9313055103658733872,524288 --field-trial-handle=2132,i,12079138367646580822,11643868750631344278,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,11852337818612403928,12983694512011715910,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3088 /prefetch:14
                                                                                                                    8⤵
                                                                                                                      PID:7160
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3120,i,17614870469795775773,2362112942291637411,524288 --field-trial-handle=2132,i,12079138367646580822,11643868750631344278,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,11852337818612403928,12983694512011715910,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3172 /prefetch:14
                                                                                                                      8⤵
                                                                                                                        PID:5804
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3876,i,2910336117255616335,15610864493002768361,2097152 --field-trial-handle=2132,i,12079138367646580822,11643868750631344278,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2140,i,11852337818612403928,12983694512011715910,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3852 /prefetch:1
                                                                                                                        8⤵
                                                                                                                          PID:2124
                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                                                                                                                    5⤵
                                                                                                                      PID:3236
                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\assistant\assistant_installer.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\assistant\assistant_installer.exe" --version
                                                                                                                      5⤵
                                                                                                                        PID:4828
                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\assistant\assistant_installer.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x294040,0x29404c,0x294058
                                                                                                                          6⤵
                                                                                                                            PID:2036
                                                                                                                • C:\Windows\system32\sihost.exe
                                                                                                                  sihost.exe
                                                                                                                  1⤵
                                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                                  PID:3440
                                                                                                                  • C:\Windows\explorer.exe
                                                                                                                    explorer.exe /LOADSAVEDWINDOWS
                                                                                                                    2⤵
                                                                                                                    • Boot or Logon Autostart Execution: Active Setup
                                                                                                                    • Enumerates connected drives
                                                                                                                    • Checks SCSI registry key(s)
                                                                                                                    • Modifies Internet Explorer settings
                                                                                                                    • Modifies registry class
                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                                                                    • Suspicious use of FindShellTrayWindow
                                                                                                                    • Suspicious use of SendNotifyMessage
                                                                                                                    PID:4112
                                                                                                                • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                  "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                  1⤵
                                                                                                                  • Modifies registry class
                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                  PID:4756
                                                                                                                • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                  "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                  1⤵
                                                                                                                  • Modifies registry class
                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                  PID:5684
                                                                                                                • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                  C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                  1⤵
                                                                                                                    PID:6848
                                                                                                                  • C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe
                                                                                                                    "C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe"
                                                                                                                    1⤵
                                                                                                                      PID:6268
                                                                                                                      • C:\Program Files\McAfee\WebAdvisor\UIHost.exe
                                                                                                                        "C:\Program Files\McAfee\WebAdvisor\UIHost.exe"
                                                                                                                        2⤵
                                                                                                                          PID:6536

                                                                                                                      Network

                                                                                                                            MITRE ATT&CK Enterprise v16

                                                                                                                            Replay Monitor

                                                                                                                            Loading Replay Monitor...

                                                                                                                            Downloads

                                                                                                                            dataConfig.cab
                                                                                                                            • Path C:\Program Files\McAfee\WebAdvisor\Analytics\dataConfig.cab
                                                                                                                            • Size 79KB
                                                                                                                            • SHA256 953708c221f4508bf6dad28e4221d3dc1f0d8b5b3e23600c187acee3803a45f6
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            log_00200057003F001D0006.txt
                                                                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt
                                                                                                                            • Size 508B
                                                                                                                            • SHA256 1f7c4729ebb1009fd5566081da40de42919c40a33e476fbf4cda48a17c57c2ce
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            log_00200057003F001D0006.txt
                                                                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 dec649ba03fed03a23c5a1493c4724cc32399ecf0f1bd644fce88c6d9644261e
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            log_00200057003F001D0006.txt
                                                                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 af8b963ae678bdb4f29261ebac067b59e48c40c5854e3cb867c327acc7dac688
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            log_00200057003F001D0006.txt
                                                                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 18a066c172a6a04d03ad273b68c0fe5f826b9e99bbeec6d38bc1ed07685fd74a
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            log_00200057003F001D0006.txt
                                                                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 4286dfd282f0e72f7de6f4782e012cd9b15876fb758f10aa0ef3800307b0ba19
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            log_00200057003F001D0006.txt
                                                                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt
                                                                                                                            • Size 4KB
                                                                                                                            • SHA256 cc62e7e88fcc12954c346b9777eb7355d2cbfae6138c96a1a8dbb2536977bfe5
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            log_00200057003F001D0006.txt
                                                                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\saBSI.exe\log_00200057003F001D0006.txt
                                                                                                                            • Size 302B
                                                                                                                            • SHA256 142ba67bf2c57b9d0900db7be3c23d911c2e38cb6017685e95da00da9cad0b1c
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            installer.exe
                                                                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\saBSI\installer.exe
                                                                                                                            • Size 25.1MB
                                                                                                                            • SHA256 2e2ccaa9dfcc34be2625ac1498ebde3489970008b5cd7f15a14b57585c6f8d99
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            saBSI.exe
                                                                                                                            • Path C:\ProgramData\McAfee\WebAdvisor\saBSI\saBSI.exe
                                                                                                                            • Size 1.5MB
                                                                                                                            • SHA256 5ec42b168f2541dbb413d6f87aa5569470a2b0c6c574c3e655242461a4524763
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            data_2
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                            Submit Download

                                                                                                                            data_3
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                            Submit Download

                                                                                                                            prep_Activatable Class_Hermes_perf.cache
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                                                                                            • Size 599B
                                                                                                                            • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            133.0.5932.24.manifest
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\133.0.5932.24.manifest
                                                                                                                            • Size 225B
                                                                                                                            • SHA256 0c224a50985264cb571fd2c0ed61bc989fd6ecef11c453e2582a226700d6d268
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            150x150Logo.scale-100.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-100.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            150x150Logo.scale-100_contrast-white.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            150x150Logo.scale-140.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-140.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            150x150Logo.scale-140_contrast-white.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            150x150Logo.scale-180.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-180.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            150x150Logo.scale-180_contrast-white.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            150x150Logo.scale-80.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-80.png
                                                                                                                            • Size 827B
                                                                                                                            • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            150x150Logo.scale-80_contrast-white.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                                                            • Size 799B
                                                                                                                            • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            70x70Logo.scale-100.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-100.png
                                                                                                                            • Size 781B
                                                                                                                            • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            70x70Logo.scale-100_contrast-white.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                                                            • Size 752B
                                                                                                                            • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            70x70Logo.scale-140.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-140.png
                                                                                                                            • Size 991B
                                                                                                                            • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            70x70Logo.scale-140_contrast-white.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-140_contrast-white.png
                                                                                                                            • Size 865B
                                                                                                                            • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            70x70Logo.scale-180.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-180.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            70x70Logo.scale-180_contrast-white.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-180_contrast-white.png
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            70x70Logo.scale-80.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-80.png
                                                                                                                            • Size 590B
                                                                                                                            • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            70x70Logo.scale-80_contrast-white.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\Assets\70x70Logo.scale-80_contrast-white.png
                                                                                                                            • Size 519B
                                                                                                                            • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            assistant_package
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\assistant_package
                                                                                                                            • Size 3.6MB
                                                                                                                            • SHA256 476635dedd92ecb61b45179264d0f6f73da81e68e9786c3c4f6c2b8efe540452
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            d3dcompiler_47.dll
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\d3dcompiler_47.dll
                                                                                                                            • Size 4.5MB
                                                                                                                            • SHA256 7133c3fe1899ef81aeb523a22b58598172e5763fb0a27a10ccce4b34566612f7
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            dxcompiler.dll
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\dxcompiler.dll
                                                                                                                            • Size 24.4MB
                                                                                                                            • SHA256 a453267bdd1c7f207702684b6a11b742df49176eeb2e28728cb5eec086896a99
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            dxil.dll
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\dxil.dll
                                                                                                                            • Size 1.5MB
                                                                                                                            • SHA256 d77798ac46e1d6610805033b266320e343d00741cf76049dd96ea5e2d99e39de
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            files_list
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\files_list
                                                                                                                            • Size 6KB
                                                                                                                            • SHA256 df53c99bd75d5a50ab78ca0291b46b2da3dda808c903b90d928e814808205df8
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            headless_command_resources.pak
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\headless_command_resources.pak
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 9337d260af693284e85d353db0926beb9932412c268558f447c74e5064bd6a3f
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            icudtl.dat
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\icudtl.dat
                                                                                                                            • Size 10.4MB
                                                                                                                            • SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            installer.exe
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer.exe
                                                                                                                            • Size 8.3MB
                                                                                                                            • SHA256 968128ce27a633a91f092062d5d0a36586dd01129c9e50d420d85b2f69319fb9
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            installer_helper_64.exe
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\installer_helper_64.exe
                                                                                                                            • Size 639KB
                                                                                                                            • SHA256 adda39e020da8fc8c98fddb668bc07cd3aa3b72a0f96ab9819eafe028844c994
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            libEGL.dll
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\libEGL.dll
                                                                                                                            • Size 492KB
                                                                                                                            • SHA256 47ba65371272562b0510f1b389bb9ff4a0e21845904a4a83958497dead3dc379
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            libGLESv2.dll
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\libGLESv2.dll
                                                                                                                            • Size 7.5MB
                                                                                                                            • SHA256 85e8cf63991c492fc72edd810c239d030656e31de2a04def498b82d5d891cc36
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            bg.pak
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\bg.pak
                                                                                                                            • Size 1005KB
                                                                                                                            • SHA256 8a151c2685798e8c559c4329496eac4845b23bf977c1f10fa97e452617179036
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            bn.pak
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\bn.pak
                                                                                                                            • Size 1.3MB
                                                                                                                            • SHA256 75b433bac6b07c87874885f87d38d6a87dab684310611072e880ea157cebf967
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            ca.pak
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\ca.pak
                                                                                                                            • Size 634KB
                                                                                                                            • SHA256 951a872c07a86b56273a468472edc64ff1fd3072ee92f1b747c2d56862266e9a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            cs.pak
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.24\localization\cs.pak
                                                                                                                            • Size 633KB
                                                                                                                            • SHA256 1ad3a061c4efeb9719caff31b374f2c7461bbf26dfa83d23378f7d146d6a2961
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            Opera Browser.lnk
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\Opera Browser.lnk
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 ab46022efef2804fcf57750095c1d8b02a2d4dbd58ebe0872493c71ef34ccdf4
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            additional_file0.tmp
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\additional_file0.tmp
                                                                                                                            • Size 2.8MB
                                                                                                                            • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            assistant_installer.exe
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\assistant\assistant_installer.exe
                                                                                                                            • Size 2.4MB
                                                                                                                            • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            dbgcore.DLL
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\assistant\dbgcore.DLL
                                                                                                                            • Size 222KB
                                                                                                                            • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            dbghelp.dll
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\assistant\dbghelp.dll
                                                                                                                            • Size 1.8MB
                                                                                                                            • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            installer_prefs_include.json
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\installer_prefs_include.json
                                                                                                                            • Size 243B
                                                                                                                            • SHA256 023fd60772bd70924452b6f2ae0b92756d0c353c30a31f8d492469550f1d150e
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            installer_prefs_include.json
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\installer_prefs_include.json
                                                                                                                            • Size 258B
                                                                                                                            • SHA256 ffb208385570f44ebac84874172b75d6bb5839d779bcee88a3194b9e0474fb29
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            installer_prefs_include.json
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\.opera\ba14ed7e-92cc-4709-895f-cc9b2e3003e4 Opera Installer Temp\opera_package_202607071314521\installer_prefs_include.json
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 773cc66b717bba6897bf0b04a4757b8083adb242aa9d0e2ca54457bc18ab05d3
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            installer.exe
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\7zSC807734A\installer.exe
                                                                                                                            • Size 8.3MB
                                                                                                                            • SHA256 0221deb9031dc461368bc66f1db22c1c6b1d4a291a9f3223f4c3653bbd646e0e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            1111-w-warp-2024.12.760.0-installer.tmp
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-G5M179DLR9.tmp\1111-w-warp-2024.12.760.0-installer.tmp
                                                                                                                            • Size 4.1MB
                                                                                                                            • SHA256 3a62ae0d102cff66fba0a1f0b9bcdf116ad369c3c4f0212eb21a53c766c75a7d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            100.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-PFIB2WKVMF.tmp\100.png
                                                                                                                            • Size 46KB
                                                                                                                            • SHA256 a6ecce54116936ca27d4be9797e32bf2f3cfc7e41519a23032992970fbd9d3ba
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            101.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-PFIB2WKVMF.tmp\101.png
                                                                                                                            • Size 51KB
                                                                                                                            • SHA256 3f63f320e919830fb21fff8dbd82509ecc8330c89513163daedb1b7687a0a529
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            component0.zip
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-PFIB2WKVMF.tmp\component0.zip
                                                                                                                            • Size 515KB
                                                                                                                            • SHA256 cc6f4faf4e8a9f4d2269d1d69a69ea326f789620fb98078cc98597f3cb998589
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            saBSI.exe
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-PFIB2WKVMF.tmp\component0_extract\saBSI.exe
                                                                                                                            • Size 1.1MB
                                                                                                                            • SHA256 f5aa950381fbcea7d730aa794974ca9e3310384a95d6cf4d015fbdbd9797b3e4
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            component1.zip
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-PFIB2WKVMF.tmp\component1.zip
                                                                                                                            • Size 3.1MB
                                                                                                                            • SHA256 6e78567c5eb7162b9c69edbba762db7c427c3f02543ef25c828948f5e4abb41d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            OperaSetup.exe
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-PFIB2WKVMF.tmp\component1_extract\OperaSetup.exe
                                                                                                                            • Size 3.1MB
                                                                                                                            • SHA256 030befec0a28196a12a7b05eceb12cd0b5776e63f65fb4eed56202ff9e08bc15
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            image.jpg
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\is-PFIB2WKVMF.tmp\image.jpg
                                                                                                                            • Size 17KB
                                                                                                                            • SHA256 29264d08ec1f194226d7a926ed74b7c6ec5f1bb9fefb7fa2611682a4d526c18d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            mwa1D1A.tmp
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\mwa1D1A.tmp
                                                                                                                            • Size 135KB
                                                                                                                            • SHA256 926061fc6a92079aa227cc2e426bd5b2130501422a95e6a8984f15f05dee2e70
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            favicon_opera_one.png
                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5764_586824961\CRX_INSTALL\favicon_opera_one.png
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            settings.dat
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                                                            • Size 40B
                                                                                                                            • SHA256 641221f4bc571ee54193da8c717ce7a11f2aa6ea42d1a49de6cde36270184f8a
                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                            Submit Download

                                                                                                                            50040448-929b-464e-89df-fc951922f12e.tmp
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\50040448-929b-464e-89df-fc951922f12e.tmp
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 d280d43961640d06c3b29d5ba3007f8326d520d01a87647878730a9d8201f8f9
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            599f09b5-3fba-4a33-8a23-43f249b07dda.tmp
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\599f09b5-3fba-4a33-8a23-43f249b07dda.tmp
                                                                                                                            • Size 203B
                                                                                                                            • SHA256 511c59e70be3efb29334e2cd98ad7b048667854873a634b2b0e9f118c1457bc1
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            f88b563e-ba88-4792-8533-92139fe8104c.tmp
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\f88b563e-ba88-4792-8533-92139fe8104c.tmp
                                                                                                                            • Size 48B
                                                                                                                            • SHA256 6c3e4742c491bf39e6a0bab42543150397ac2d616a0e3cbe530a1577e2c8703d
                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                            Submit Download

                                                                                                                            the-real-index
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                            • Size 264B
                                                                                                                            • SHA256 5a531325ddc6ba6dd0fe4417cb2d16521010ef4a7e9290a5472883eee77b7242
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            CURRENT
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\CURRENT
                                                                                                                            • Size 16B
                                                                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                            Submit Download

                                                                                                                            MANIFEST-000001
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Scripts\MANIFEST-000001
                                                                                                                            • Size 41B
                                                                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                            • MD5 SHA1 SHA512
                                                                                                                            Submit Download

                                                                                                                            favicon_opera_one.png
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.49.0.1_0\favicon_opera_one.png
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            reader_mode.js
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.49.0.1_0\reader_mode.js
                                                                                                                            • Size 112KB
                                                                                                                            • SHA256 2351bf9735cdb0eb1aeb738cf596ec80a063f47447c9cba68da963c644e7d0ea
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            spotify_frame_interceptor.js
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.49.0.1_0\spotify_frame_interceptor.js
                                                                                                                            • Size 5KB
                                                                                                                            • SHA256 efc95edf1976955e0aaad47bd2e84951c0fb06f18f8b1c09646f0c950d60d4cd
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                            Submit Download

                                                                                                                            fca38324-ee48-4548-a733-18a4b9b6c12c.tmp
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\fca38324-ee48-4548-a733-18a4b9b6c12c.tmp
                                                                                                                            • Size 72B
                                                                                                                            • SHA256 c170cd21660f036be3db1b1e60ece47be3a3e2168b7cbe52c11b03b083a68316
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            the-real-index
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                            • Size 96B
                                                                                                                            • SHA256 4ac893726d4867b6d26b19dd5e27216e407648a26177140b4556729ea867c487
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            f53c7ad3-3a3d-471e-8252-828eab84100a.tmp
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\f53c7ad3-3a3d-471e-8252-828eab84100a.tmp
                                                                                                                            • Size 445B
                                                                                                                            • SHA256 0719138a83e1535af420fcaaecdb2355e97670a8e94bfcdd3c01aa17b0bc2ac2
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 e503f9c6a8096b46136a8e8291f0d749221c4b3686313b4a33edf52508c2f465
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 dfa463b857e6920a4b63e2af5779db5223eafd7d793e4f58d5c067ca074af483
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Size 685B
                                                                                                                            • SHA256 f34c12b72e7a22d6f8b0e097bc6ad562805f8d1d202aba17a418e6fa3792da98
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Size 845B
                                                                                                                            • SHA256 a7e1271f677dad511ab32281710f2801ca445f9ca3b1ae09d441959efcbf48c6
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 dd9cbcebcfd0e7877b0197f47fbeb76a012eed180e4fce39c6070158fe54768a
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 2e8572cd45cf17f25c9948dbd9cb3f395d67c11b9fdcbd32fc5ef61d4f3e944a
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Size 557B
                                                                                                                            • SHA256 260e29532ce65817764ca688706af6c462a0a74b1992c4e96f391ba2834b1b9c
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Size 1021B
                                                                                                                            • SHA256 bf313a27fd8c81c8e9b651bd1bc66b3361c4d5a80ff8fab64e1a80376c705d47
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Size 1021B
                                                                                                                            • SHA256 7be7b022d67b3cbafa4817876245c52d0a6c627823f9aaa0c6d443966419ea8a
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_58ed3907-6714-4e46-96e3-b140ff5022c9.raw
                                                                                                                            • Size 1005B
                                                                                                                            • SHA256 937d8db608dc7418b6945a04e9c48069eb9973ba63ae295aea208d62b9235678
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            ssdfp5764.0.987812865
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5764.0.987812865
                                                                                                                            • Size 265B
                                                                                                                            • SHA256 e75ffcd6116fb941fc0288dd65cd120bb7e39e0248f88420bf160bfa1156bbe8
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            ssdfp5764.0.987812865
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5764.0.987812865
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 bdae9e8484d3c60d7f8e69d962dedffbfefc341a8c632c792fb4f01c380492b3
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            ssdfp5764.0.987812865
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5764.0.987812865
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 ef5dc987bab0e4ceceaa12f31ae997580116e83336e89a5470af40b912d9fe71
                                                                                                                            • MD5 SHA1 SHA512 TLSH
                                                                                                                            Submit Download

                                                                                                                            data_0
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_0
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                            Submit Download

                                                                                                                            data_1
                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                                                                            • Size 264KB
                                                                                                                            • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP
                                                                                                                            Submit Download

                                                                                                                            memory/1256-12-0x0000000000810000-0x00000000008EC000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/1256-0-0x0000000000810000-0x00000000008EC000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-37-0x00000000062A0000-0x00000000063E0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-28-0x00000000062A0000-0x00000000063E0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-6-0x0000000001610000-0x0000000001611000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-351-0x00000000006C0000-0x0000000000AF6000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-14-0x0000000001610000-0x0000000001611000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-36-0x00000000062A0000-0x00000000063E0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-31-0x00000000006C0000-0x0000000000AF6000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-38-0x00000000062A0000-0x00000000063E0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-228-0x00000000006C0000-0x0000000000AF6000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-32-0x00000000062A0000-0x00000000063E0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-29-0x00000000062A0000-0x00000000063E0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-215-0x00000000006C0000-0x0000000000AF6000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-22-0x00000000062A0000-0x00000000063E0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-23-0x00000000062A0000-0x00000000063E0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-40-0x00000000006C0000-0x0000000000AF6000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-315-0x0000000002DE0000-0x0000000002F20000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-41-0x00000000062A0000-0x00000000063E0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/2668-13-0x00000000006C0000-0x0000000000AF6000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/3324-989-0x00007FF918C90000-0x00007FF918C91000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/3324-986-0x00007FF919F60000-0x00007FF919F61000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/4756-216-0x000001FFEA1F0000-0x000001FFEA624000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-879-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1205-0x00007FF7620F0000-0x00007FF762100000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1202-0x00007FF7620F0000-0x00007FF762100000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1200-0x00007FF7620F0000-0x00007FF762100000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1188-0x00007FF74DF80000-0x00007FF74DF90000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1176-0x00007FF7620F0000-0x00007FF762100000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1148-0x00007FF71F740000-0x00007FF71F750000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1141-0x00007FF733BE0000-0x00007FF733BF0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1130-0x00007FF733BE0000-0x00007FF733BF0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1123-0x00007FF733BE0000-0x00007FF733BF0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1122-0x00007FF733BE0000-0x00007FF733BF0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1102-0x00007FF733BE0000-0x00007FF733BF0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1100-0x00007FF753B40000-0x00007FF753B50000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1096-0x00007FF736550000-0x00007FF736560000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1144-0x00007FF733BE0000-0x00007FF733BF0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1092-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1091-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1090-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1088-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1087-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1086-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1083-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1082-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1081-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1159-0x00007FF75E620000-0x00007FF75E630000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1201-0x00007FF7620F0000-0x00007FF762100000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1094-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1093-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1084-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1080-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1061-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1034-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1037-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-881-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-882-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-890-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-893-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1006-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1030-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1036-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-1031-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-883-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-878-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5420-880-0x00007FF716CA0000-0x00007FF716CB0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5684-71-0x000001F4819C0000-0x000001F4819E0000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5684-72-0x000001F481E10000-0x000001F481F10000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5684-106-0x000001F494110000-0x000001F494130000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5684-81-0x000001F481C10000-0x000001F481C30000-memory.dmp
                                                                                                                            Download

                                                                                                                            memory/5684-43-0x000001F4801E0000-0x000001F4802E0000-memory.dmp
                                                                                                                            Download