Overview

overview

8

Static

static

8

OperaInstaller.exe

windows10-2004-x64

8

OperaInstaller.exe

windows11-ltsc_2024-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    133s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    19/09/2026, 22:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample260919-2kr2macc76
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Checks computer location settings 2 TTPs 13 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 4 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 10 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 15 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 4 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 8 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 28 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 45 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 40 IoCs
  • Suspicious use of SendNotifyMessage 46 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2732
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:5600
      • C:\Users\Admin\AppData\Local\Temp\7zS0E505BF9\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS0E505BF9\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Modifies system certificate store
        • Suspicious use of WriteProcessMemory
        PID:5756
        • C:\Users\Admin\AppData\Local\Temp\7zS0E505BF9\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS0E505BF9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff6b96469d8,0x7ff6b96469e8,0x7ff6b96469f8
          4⤵
          • Executes dropped EXE
          PID:5788
        • C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:5864
        • C:\Users\Admin\AppData\Local\Temp\7zS0E505BF9\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS0E505BF9\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=5756 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_20260919234003" --session-guid=2e8c10b0-105f-438a-9d3d-059815ceb4f8 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=8408000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:5980
          • C:\Users\Admin\AppData\Local\Temp\7zS0E505BF9\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS0E505BF9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x294,0x298,0x29c,0x264,0x2a0,0x7ff6b96469d8,0x7ff6b96469e8,0x7ff6b96469f8
            5⤵
            • Executes dropped EXE
            PID:6020
          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe" --backend --initial-pid=5756 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031" --session-guid=2e8c10b0-105f-438a-9d3d-059815ceb4f8 --server-tracking-blob=MGNhMGM0ZGZhNTIxNWU0N2FhNmNhZGE1YTJlYjFjNzY1M2RhOWY4MjQ2MzQ3NDIwMjUyMzZiNDlhMmRlZDhkNjp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhIiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTAiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzg5ODU3NjAwLjA4MzEiLCJ1c2VyYWdlbnQiOiJPcGVyYSBJbnN0YWxsZXIvMS4wIiwidXRtIjp7ImNhbXBhaWduIjoic3BvdGlmeV9vcGVyYSIsIm1lZGl1bSI6InBiIiwic291cmNlIjoid3JrIn0sInV1aWQiOiJmNzk4Njk1Mi02ZWY2LTQwNWMtODViMi03OTZkNTRjNjI2ZjAifQ== --silent --desktopshortcut=1 --install-subfolder=136.0.6008.22
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Enumerates system info in registry
            • Modifies registry class
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:6128
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x28c,0x290,0x294,0x264,0x298,0x7ff6b74069d8,0x7ff6b74069e8,0x7ff6b74069f8
              6⤵
              • Executes dropped EXE
              PID:4852
            • C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:5868
              • C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0xc3c9cc,0xc3c9d8,0xc3c9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:5972
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:5768
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x126c9cc,0x126c9d8,0x126c9e4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:4416
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:5632
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:2916
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x244,0x238,0x248,0x7ff8418fed30,0x7ff8418fed40,0x7ff8418fed50
                      10⤵
                      • Executes dropped EXE
                      PID:2876
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:5916
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x244,0x238,0x248,0x7ff8418fed30,0x7ff8418fed40,0x7ff8418fed50
                      10⤵
                      • Executes dropped EXE
                      PID:2612
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x11b7324,0x11b7330,0x11b733c
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:772
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:5540
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x240,0x244,0x234,0x248,0x7ff8418fed30,0x7ff8418fed40,0x7ff8418fed50
                        11⤵
                        • Executes dropped EXE
                        PID:1584
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:5316
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x240,0x244,0x248,0x238,0x24c,0x7ff8418fed30,0x7ff8418fed40,0x7ff8418fed50
                        11⤵
                        • Executes dropped EXE
                        PID:3360
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:6280
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ff8418fed30,0x7ff8418fed40,0x7ff8418fed50
                        11⤵
                        • Executes dropped EXE
                        PID:6312
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Program Files directory
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of WriteProcessMemory
              PID:3940
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ff8418fed30,0x7ff8418fed40,0x7ff8418fed50
                7⤵
                • Executes dropped EXE
                PID:728
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1992,i,5369171954817175082,15443308159938376243,524288 --field-trial-handle=2140,i,15051725401403171992,3003649651438787553,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2144,i,12713394943009468790,4880532152804780342,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2164 /prefetch:3
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                • Enumerates system info in registry
                PID:6704
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1760,i,7257334373779374859,7207566465531534284,262144 --field-trial-handle=2140,i,15051725401403171992,3003649651438787553,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2144,i,12713394943009468790,4880532152804780342,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2116 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6696
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2480,i,17572767245891359656,6523948488283669059,524288 --field-trial-handle=2140,i,15051725401403171992,3003649651438787553,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2144,i,12713394943009468790,4880532152804780342,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2488 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6888
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3764,i,2953639966598158235,5346251227258939143,2097152 --field-trial-handle=2140,i,15051725401403171992,3003649651438787553,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2144,i,12713394943009468790,4880532152804780342,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3960 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6152
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4420,i,2315009520884897415,13744726466179292047,524288 --field-trial-handle=2140,i,15051725401403171992,3003649651438787553,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2144,i,12713394943009468790,4880532152804780342,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4384 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:2880
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4432,i,9482767950573915877,9622071797313812420,524288 --field-trial-handle=2140,i,15051725401403171992,3003649651438787553,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2144,i,12713394943009468790,4880532152804780342,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4460 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:3632
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4452,i,8267645585708960614,2628390264200509785,2097152 --field-trial-handle=2140,i,15051725401403171992,3003649651438787553,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2144,i,12713394943009468790,4880532152804780342,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4596 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6228
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4348,i,15330440025909062520,6192293062871999690,524288 --field-trial-handle=2140,i,15051725401403171992,3003649651438787553,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2144,i,12713394943009468790,4880532152804780342,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4916 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:7324
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4492,i,12076074595198561044,5862250352936881553,524288 --field-trial-handle=2140,i,15051725401403171992,3003649651438787553,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2144,i,12713394943009468790,4880532152804780342,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5060 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:7964
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5208,i,5790113219721189744,1658048903100991261,2097152 --field-trial-handle=2140,i,15051725401403171992,3003649651438787553,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2144,i,12713394943009468790,4880532152804780342,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5228 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:7708
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\additional_file2.tmp"
              6⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Adds Run key to start application
              • Drops file in Program Files directory
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              PID:9032
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ff8418fed30,0x7ff8418fed40,0x7ff8418fed50
                7⤵
                • Executes dropped EXE
                PID:9064
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1704,i,12233747135071284505,2436554172779123124,262144 --field-trial-handle=2100,i,9403610117779264255,8623855515372474980,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,14558685642586697760,18095336970335211358,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2096 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7564
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1972,i,1997855249906088577,15399233590510218599,524288 --field-trial-handle=2100,i,9403610117779264255,8623855515372474980,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,14558685642586697760,18095336970335211358,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2124 /prefetch:3
                7⤵
                • Executes dropped EXE
                • System Time Discovery
                • Enumerates system info in registry
                PID:7600
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2544,i,15424750790029851072,13140825709125646836,524288 --field-trial-handle=2100,i,9403610117779264255,8623855515372474980,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,14558685642586697760,18095336970335211358,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2612 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:7544
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3948,i,9550737106082205849,11719399218568742364,2097152 --field-trial-handle=2100,i,9403610117779264255,8623855515372474980,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,14558685642586697760,18095336970335211358,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=4000 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7932
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4316,i,18335307552878377205,16534415094723994740,524288 --field-trial-handle=2100,i,9403610117779264255,8623855515372474980,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,14558685642586697760,18095336970335211358,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3384 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7224
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4412,i,18442903449416175567,11037127524491013471,2097152 --field-trial-handle=2100,i,9403610117779264255,8623855515372474980,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,14558685642586697760,18095336970335211358,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4508 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7752
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4692,i,10567193682155912348,1312601063433234799,2097152 --field-trial-handle=2100,i,9403610117779264255,8623855515372474980,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,14558685642586697760,18095336970335211358,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4736 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7460
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3900,i,15950185398568988360,9183570864156131108,524288 --field-trial-handle=2100,i,9403610117779264255,8623855515372474980,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,14558685642586697760,18095336970335211358,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4968 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7856
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4720,i,2022617105299327766,13154704280781977104,524288 --field-trial-handle=2100,i,9403610117779264255,8623855515372474980,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,14558685642586697760,18095336970335211358,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4712 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7852
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4380,i,18064316588182144094,14663400073473958901,524288 --field-trial-handle=2100,i,9403610117779264255,8623855515372474980,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2104,i,14558685642586697760,18095336970335211358,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5180 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:8776
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Checks computer location settings
              • Adds Run key to start application
              • Drops file in Program Files directory
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              PID:6744
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ff8418fed30,0x7ff8418fed40,0x7ff8418fed50
                7⤵
                  PID:6676
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1972,i,9663788325416083698,16192397047876658567,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2160 /prefetch:3
                  7⤵
                  • System Time Discovery
                  • Enumerates system info in registry
                  PID:8508
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1736,i,12470142048821814482,18203680387276795396,262144 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2108 /prefetch:2
                  7⤵
                  • Enumerates system info in registry
                  PID:9016
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2596,i,9016009326197567914,7115608038038937837,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2804 /prefetch:8
                  7⤵
                  • Enumerates system info in registry
                  PID:8532
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2872,i,6206106596091517278,16556701555253975534,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3484 /prefetch:8
                  7⤵
                  • Enumerates system info in registry
                  PID:8736
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3472,i,328940640587925953,7517179664508641742,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3560 /prefetch:8
                  7⤵
                  • Enumerates system info in registry
                  PID:8740
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3516,i,15290461105893736549,4919200585925139087,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3604 /prefetch:8
                  7⤵
                  • Enumerates system info in registry
                  PID:8760
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3492,i,18102511120605639702,5210449875566057143,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3584 /prefetch:8
                  7⤵
                  • Enumerates system info in registry
                  PID:8556
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3528,i,2021748109959782952,8912776663500921962,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3624 /prefetch:8
                  7⤵
                  • Enumerates system info in registry
                  PID:8820
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3540,i,15756107732864351258,17141387143304477376,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3596 /prefetch:8
                  7⤵
                  • Enumerates system info in registry
                  PID:7268
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3552,i,9779031992696484259,14811818137396899680,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3684 /prefetch:8
                  7⤵
                  • Enumerates system info in registry
                  PID:8684
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4348,i,16606773558242212839,8262578910156137848,2097152 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4376 /prefetch:1
                  7⤵
                  • Checks computer location settings
                  • Enumerates system info in registry
                  PID:8612
                • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_gx_splash.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                  7⤵
                  • Modifies registry class
                  PID:8100
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4812,i,10308834480877543295,12681566140801254290,2097152 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4828 /prefetch:2
                  7⤵
                  • Checks computer location settings
                  • Enumerates system info in registry
                  PID:8372
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4984,i,9139205400725774722,8256595096655871145,2097152 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5008 /prefetch:1
                  7⤵
                  • Checks computer location settings
                  • Enumerates system info in registry
                  PID:6980
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5256,i,8301516589182798066,14756983900497123348,2097152 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5264 /prefetch:1
                  7⤵
                  • Checks computer location settings
                  PID:6796
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5372,i,12102746002461789739,15008220322071077902,2097152 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5388 /prefetch:1
                  7⤵
                    PID:7000
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6204,i,8907925019479254166,13761793355391157625,2097152 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6216 /prefetch:2
                    7⤵
                      PID:8636
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6612,i,16900600096764098238,8680294336720728679,2097152 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6692 /prefetch:2
                      7⤵
                        PID:7956
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6728,i,3558900970805171680,5708342094970115833,2097152 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6668 /prefetch:2
                        7⤵
                          PID:7464
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7004,i,17964818979106353200,16836675885637932807,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6672 /prefetch:8
                          7⤵
                            PID:7312
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7136,i,7864573140137340381,8797755680648800122,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7012 /prefetch:8
                            7⤵
                              PID:8060
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7152,i,14191141857588265594,6932572222440368761,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7180 /prefetch:8
                              7⤵
                                PID:7320
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7216,i,9080206738439266870,14530961123585214896,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7192 /prefetch:8
                                7⤵
                                  PID:7724
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7568,i,4746056001553171818,13789881069650490915,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7592 /prefetch:8
                                  7⤵
                                    PID:7480
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7576,i,1594426841147798618,3179161237710031411,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7620 /prefetch:8
                                    7⤵
                                      PID:7540
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7584,i,7622167297003747317,14290564598378560976,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7640 /prefetch:8
                                      7⤵
                                        PID:7656
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7920,i,16393885496964810134,16813507135661685598,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7928 /prefetch:8
                                        7⤵
                                          PID:7624
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7624,i,14927891868275441722,11134983912095130702,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7904 /prefetch:8
                                          7⤵
                                            PID:7684
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7956,i,16686047739217777371,2917168700155738716,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7912 /prefetch:8
                                            7⤵
                                              PID:7908
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7964,i,16660261108091029154,5283872176798265009,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7988 /prefetch:8
                                              7⤵
                                                PID:7752
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8456,i,8973645313114300025,13672588757544055401,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8464 /prefetch:8
                                                7⤵
                                                  PID:4792
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8596,i,16736029045064280420,4724560259740451029,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8608 /prefetch:8
                                                  7⤵
                                                    PID:2000
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8740,i,7983141345853264498,1399892375048942117,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8752 /prefetch:8
                                                    7⤵
                                                      PID:1900
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8880,i,4945749617303953588,15377944560202908308,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8892 /prefetch:8
                                                      7⤵
                                                        PID:5264
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8900,i,6495735274971868666,12112996801544454178,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9024 /prefetch:8
                                                        7⤵
                                                          PID:5736
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6636,i,11001292495927856601,4337302008336597440,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=6644 /prefetch:8
                                                          7⤵
                                                            PID:6284
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6652,i,13254750514320268764,2272651587963595493,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=6656 /prefetch:8
                                                            7⤵
                                                              PID:8968
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9304,i,14187131918360745770,11515360585082310831,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9472 /prefetch:8
                                                              7⤵
                                                                PID:1956
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=9540,i,17272285215706535399,15369142018497704279,2097152 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9708 /prefetch:2
                                                                7⤵
                                                                  PID:2132
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=9820,i,3532916976640381396,16256308551898528693,2097152 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9936 /prefetch:1
                                                                  7⤵
                                                                    PID:7872
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10092,i,1212737929320726039,18335240615109215076,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10084 /prefetch:8
                                                                    7⤵
                                                                      PID:8520
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3876,i,15985271588501433194,16264875760349032597,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=5712 /prefetch:8
                                                                      7⤵
                                                                        PID:8384
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10496,i,2990118581669421639,5094806002034836399,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10508 /prefetch:8
                                                                        7⤵
                                                                          PID:7772
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                                                          7⤵
                                                                            PID:6008
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff747b15598,0x7ff747b155a8,0x7ff747b155b8
                                                                              8⤵
                                                                                PID:5932
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe" --fix-taskbar-pins
                                                                              7⤵
                                                                                PID:1592
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
                                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff6b74069d8,0x7ff6b74069e8,0x7ff6b74069f8
                                                                                  8⤵
                                                                                    PID:8300
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --metrics-shmem-handle=10916,i,6049035684972565872,2117532876964592066,2097152 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10968 /prefetch:1
                                                                                  7⤵
                                                                                    PID:448
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11080,i,7335619131420604309,15674244474164879742,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11104 /prefetch:8
                                                                                    7⤵
                                                                                      PID:5928
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11124,i,313425347544293793,1622901527298163376,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11244 /prefetch:8
                                                                                      7⤵
                                                                                        PID:7760
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11392,i,1948218846305830783,14414486815232754261,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11404 /prefetch:8
                                                                                        7⤵
                                                                                          PID:7432
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10924,i,12259230948845307863,12919107940355808080,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=10528 /prefetch:8
                                                                                          7⤵
                                                                                            PID:7972
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6980,i,993149541175310695,7092986795558114913,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=10908 /prefetch:8
                                                                                            7⤵
                                                                                              PID:5068
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9524,i,11034699674557710373,1966748207428775842,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=9968 /prefetch:8
                                                                                              7⤵
                                                                                                PID:8152
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9004,i,4812783600115719886,15818760997949491418,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=9312 /prefetch:8
                                                                                                7⤵
                                                                                                  PID:6836
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=8864,i,17999388679458246168,1079092617433986804,2097152 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=7952 /prefetch:2
                                                                                                  7⤵
                                                                                                    PID:7568
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8860,i,11266651514328483197,6628229254545931220,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8880 /prefetch:8
                                                                                                    7⤵
                                                                                                      PID:7216
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11444,i,12205065007118563864,11932363728856796764,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=10912 /prefetch:8
                                                                                                      7⤵
                                                                                                        PID:7196
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6980,i,417839016452233077,8118522608545939657,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=11392 /prefetch:8
                                                                                                        7⤵
                                                                                                          PID:7636
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9644,i,2369397671091221295,2600559498580904363,524288 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=8436 /prefetch:8
                                                                                                          7⤵
                                                                                                            PID:9200
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=8900,i,2645353426837524416,723604487666396763,2097152 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=11232 /prefetch:2
                                                                                                            7⤵
                                                                                                              PID:4196
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:in-house-autocomplete-send=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=8584,i,6562195010059460178,12352905238426512700,2097152 --field-trial-handle=2112,i,14680551938118157524,1627463982054515088,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,10175387194707975600,16244193875704331186,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=9240 /prefetch:2
                                                                                                              7⤵
                                                                                                                PID:8896
                                                                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\assistant\Assistant_136.0.6008.22_Setup.exe_sfx.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\assistant\Assistant_136.0.6008.22_Setup.exe_sfx.exe"
                                                                                                          4⤵
                                                                                                          • Executes dropped EXE
                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                          PID:2296
                                                                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\assistant\assistant_installer.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\assistant\assistant_installer.exe" --version
                                                                                                          4⤵
                                                                                                          • Executes dropped EXE
                                                                                                          • Loads dropped DLL
                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                          PID:5284
                                                                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\assistant\assistant_installer.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x244,0x1f8,0x248,0xc3c9cc,0xc3c9d8,0xc3c9e4
                                                                                                            5⤵
                                                                                                            • Executes dropped EXE
                                                                                                            • Loads dropped DLL
                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                            PID:5484
                                                                                                  • C:\Windows\System32\rundll32.exe
                                                                                                    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                    1⤵
                                                                                                      PID:4404
                                                                                                    • C:\Program Files\Internet Explorer\iexplore.exe
                                                                                                      "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\Downloads\OpenResume.xsl
                                                                                                      1⤵
                                                                                                      • Modifies Internet Explorer settings
                                                                                                      • Suspicious use of FindShellTrayWindow
                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                      PID:1696
                                                                                                      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                                                                                        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1696 CREDAT:17410 /prefetch:2
                                                                                                        2⤵
                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                        • Modifies Internet Explorer settings
                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                        PID:380
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                                                      1⤵
                                                                                                      • Checks processor information in registry
                                                                                                      • Enumerates system info in registry
                                                                                                      • Modifies data under HKEY_USERS
                                                                                                      • Modifies registry class
                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                      • Suspicious use of FindShellTrayWindow
                                                                                                      • Suspicious use of SendNotifyMessage
                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                      PID:3572
                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ff8617ac728,0x7ff8617ac734,0x7ff8617ac740
                                                                                                        2⤵
                                                                                                          PID:4472
                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1588,i,9484092467224425334,2005024344873640518,524288 --field-trial-handle=2064,i,13089080601951479073,15577938002523810744,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2560 /prefetch:3
                                                                                                          2⤵
                                                                                                          • System Time Discovery
                                                                                                          PID:3724
                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,12692763218207397894,13702703960340055309,262144 --field-trial-handle=2064,i,13089080601951479073,15577938002523810744,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2060 /prefetch:2
                                                                                                          2⤵
                                                                                                            PID:2004
                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2180,i,11963247829469150266,4499953072702712868,524288 --field-trial-handle=2064,i,13089080601951479073,15577938002523810744,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2568 /prefetch:8
                                                                                                            2⤵
                                                                                                              PID:2852
                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3196,i,8691019115379659216,6046218554893087763,2097152 --field-trial-handle=2064,i,13089080601951479073,15577938002523810744,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3220 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:3528
                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3228,i,3438067837342049090,14655514256367287336,2097152 --field-trial-handle=2064,i,13089080601951479073,15577938002523810744,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3284 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:904
                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4444,i,3973255207654843415,13519471923078772182,2097152 --field-trial-handle=2064,i,13089080601951479073,15577938002523810744,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4448 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:332
                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4724,i,7686923125150277457,1272575842279242310,2097152 --field-trial-handle=2064,i,13089080601951479073,15577938002523810744,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4764 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:4796
                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5368,i,3156395776543378841,12862487027903617755,524288 --field-trial-handle=2064,i,13089080601951479073,15577938002523810744,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5256 /prefetch:8
                                                                                                                      2⤵
                                                                                                                        PID:3392
                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3496,i,7020001077672733909,2226909275753171629,524288 --field-trial-handle=2064,i,13089080601951479073,15577938002523810744,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5376 /prefetch:8
                                                                                                                        2⤵
                                                                                                                          PID:5412
                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5412,i,12823338740048452545,15461671096327017058,524288 --field-trial-handle=2064,i,13089080601951479073,15577938002523810744,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5508 /prefetch:8
                                                                                                                          2⤵
                                                                                                                            PID:5420
                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5384,i,15462705508626236539,11871365291690974845,524288 --field-trial-handle=2064,i,13089080601951479073,15577938002523810744,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5420 /prefetch:8
                                                                                                                            2⤵
                                                                                                                              PID:5428
                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=4948,i,187462970644519791,5864720500385098544,524288 --field-trial-handle=2064,i,13089080601951479073,15577938002523810744,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=864 /prefetch:8
                                                                                                                              2⤵
                                                                                                                                PID:3036
                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5672,i,4487339742077281264,9737177893084895770,2097152 --field-trial-handle=2064,i,13089080601951479073,15577938002523810744,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5564 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:5956
                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5912,i,14408873869772006376,1625103554703138833,2097152 --field-trial-handle=2064,i,13089080601951479073,15577938002523810744,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5792 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:1824
                                                                                                                                • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                  "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                  1⤵
                                                                                                                                    PID:4248
                                                                                                                                  • C:\Windows\system32\svchost.exe
                                                                                                                                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                    1⤵
                                                                                                                                      PID:4396
                                                                                                                                    • C:\Windows\SysWOW64\DllHost.exe
                                                                                                                                      C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                                                                                                                                      1⤵
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                      PID:1196
                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                                                      1⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      • Loads dropped DLL
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      • Enumerates system info in registry
                                                                                                                                      • Suspicious use of FindShellTrayWindow
                                                                                                                                      • Suspicious use of SendNotifyMessage
                                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                                      PID:5144
                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                        2⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Loads dropped DLL
                                                                                                                                        • Enumerates system info in registry
                                                                                                                                        • Suspicious use of WriteProcessMemory
                                                                                                                                        PID:3272
                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x23c,0x240,0x244,0x238,0x248,0x7ff8418fed30,0x7ff8418fed40,0x7ff8418fed50
                                                                                                                                          3⤵
                                                                                                                                          • Executes dropped EXE
                                                                                                                                          PID:4672
                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                        2⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Loads dropped DLL
                                                                                                                                        • Suspicious use of WriteProcessMemory
                                                                                                                                        PID:4828
                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ff8418fed30,0x7ff8418fed40,0x7ff8418fed50
                                                                                                                                          3⤵
                                                                                                                                          • Executes dropped EXE
                                                                                                                                          PID:5024
                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x26c,0x270,0x274,0x228,0x278,0x11b7324,0x11b7330,0x11b733c
                                                                                                                                        2⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Loads dropped DLL
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        • Suspicious use of WriteProcessMemory
                                                                                                                                        PID:5908
                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                          3⤵
                                                                                                                                          • Executes dropped EXE
                                                                                                                                          • Loads dropped DLL
                                                                                                                                          • Enumerates system info in registry
                                                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                                                          PID:6172
                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x24c,0x250,0x254,0x248,0x258,0x7ff8418fed30,0x7ff8418fed40,0x7ff8418fed50
                                                                                                                                            4⤵
                                                                                                                                            • Executes dropped EXE
                                                                                                                                            PID:6232
                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                          3⤵
                                                                                                                                          • Executes dropped EXE
                                                                                                                                          • Loads dropped DLL
                                                                                                                                          • Enumerates system info in registry
                                                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                                                          PID:6332
                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ff8418fed30,0x7ff8418fed40,0x7ff8418fed50
                                                                                                                                            4⤵
                                                                                                                                            • Executes dropped EXE
                                                                                                                                            PID:6392
                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                          3⤵
                                                                                                                                          • Executes dropped EXE
                                                                                                                                          • Loads dropped DLL
                                                                                                                                          • Enumerates system info in registry
                                                                                                                                          PID:6500
                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ff8418fed30,0x7ff8418fed40,0x7ff8418fed50
                                                                                                                                            4⤵
                                                                                                                                            • Executes dropped EXE
                                                                                                                                            PID:6516
                                                                                                                                    • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                                      C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                                      1⤵
                                                                                                                                        PID:7364
                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                                                                                                        1⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Loads dropped DLL
                                                                                                                                        PID:7732
                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x238,0x23c,0x240,0x234,0x244,0x7ff8418fed30,0x7ff8418fed40,0x7ff8418fed50
                                                                                                                                          2⤵
                                                                                                                                          • Executes dropped EXE
                                                                                                                                          PID:7900
                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                                                                                        1⤵
                                                                                                                                          PID:2120
                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff747b15598,0x7ff747b155a8,0x7ff747b155b8
                                                                                                                                            2⤵
                                                                                                                                              PID:6104
                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                                                                                                              2⤵
                                                                                                                                                PID:8416

                                                                                                                                            Network

                                                                                                                                                  MITRE ATT&CK Enterprise v16

                                                                                                                                                  Reconnaissance

                                                                                                                                                  Resource Development

                                                                                                                                                  Initial Access

                                                                                                                                                  Execution

                                                                                                                                                  Persistence

                                                                                                                                                  Boot or Logon Autostart Execution

                                                                                                                                                  1
                                                                                                                                                  T1547

                                                                                                                                                  Registry Run Keys / Startup Folder

                                                                                                                                                  1
                                                                                                                                                  T1547.001

                                                                                                                                                  Event Triggered Execution

                                                                                                                                                  1
                                                                                                                                                  T1546

                                                                                                                                                  Component Object Model Hijacking

                                                                                                                                                  1
                                                                                                                                                  T1546.015

                                                                                                                                                  Privilege Escalation

                                                                                                                                                  Boot or Logon Autostart Execution

                                                                                                                                                  1
                                                                                                                                                  T1547

                                                                                                                                                  Registry Run Keys / Startup Folder

                                                                                                                                                  1
                                                                                                                                                  T1547.001

                                                                                                                                                  Event Triggered Execution

                                                                                                                                                  1
                                                                                                                                                  T1546

                                                                                                                                                  Component Object Model Hijacking

                                                                                                                                                  1
                                                                                                                                                  T1546.015

                                                                                                                                                  Defense Evasion

                                                                                                                                                  Modify Registry

                                                                                                                                                  3
                                                                                                                                                  T1112

                                                                                                                                                  Subvert Trust Controls

                                                                                                                                                  1
                                                                                                                                                  T1553

                                                                                                                                                  Install Root Certificate

                                                                                                                                                  1
                                                                                                                                                  T1553.004

                                                                                                                                                  Credential Access

                                                                                                                                                  Credentials from Password Stores

                                                                                                                                                  1
                                                                                                                                                  T1555

                                                                                                                                                  Credentials from Web Browsers

                                                                                                                                                  1
                                                                                                                                                  T1555.003

                                                                                                                                                  Unsecured Credentials

                                                                                                                                                  1
                                                                                                                                                  T1552

                                                                                                                                                  Credentials In Files

                                                                                                                                                  1
                                                                                                                                                  T1552.001

                                                                                                                                                  Discovery

                                                                                                                                                  Browser Information Discovery

                                                                                                                                                  1
                                                                                                                                                  T1217

                                                                                                                                                  Peripheral Device Discovery

                                                                                                                                                  1
                                                                                                                                                  T1120

                                                                                                                                                  Query Registry

                                                                                                                                                  6
                                                                                                                                                  T1012

                                                                                                                                                  System Information Discovery

                                                                                                                                                  5
                                                                                                                                                  T1082

                                                                                                                                                  System Location Discovery

                                                                                                                                                  1
                                                                                                                                                  T1614

                                                                                                                                                  System Language Discovery

                                                                                                                                                  1
                                                                                                                                                  T1614.001

                                                                                                                                                  System Time Discovery

                                                                                                                                                  1
                                                                                                                                                  T1124

                                                                                                                                                  Lateral Movement

                                                                                                                                                  Collection

                                                                                                                                                  Data from Local System

                                                                                                                                                  1
                                                                                                                                                  T1005

                                                                                                                                                  Command and Control

                                                                                                                                                  Exfiltration

                                                                                                                                                  Impact

                                                                                                                                                  Replay Monitor

                                                                                                                                                  Loading Replay Monitor...

                                                                                                                                                  Downloads

                                                                                                                                                  opera-one-dark.jpg
                                                                                                                                                  • Path C:\Program Files\scoped_dir6744_1466808072\opera-one-dark.jpg
                                                                                                                                                  • Size 349KB
                                                                                                                                                  • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  persona.ini
                                                                                                                                                  • Path C:\Program Files\scoped_dir6744_1466808072\persona.ini
                                                                                                                                                  • Size 217B
                                                                                                                                                  • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  opera-one.jpg
                                                                                                                                                  • Path C:\Program Files\scoped_dir6744_192344842\opera-one.jpg
                                                                                                                                                  • Size 194KB
                                                                                                                                                  • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  persona.ini
                                                                                                                                                  • Path C:\Program Files\scoped_dir6744_192344842\persona.ini
                                                                                                                                                  • Size 207B
                                                                                                                                                  • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                  • Size 471B
                                                                                                                                                  • SHA256 a19c4b1450f3055256824f22a1af7a2e716e40a469a3b8737717bcac1949388b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                  • Size 416B
                                                                                                                                                  • SHA256 d0e0e0d4e09f49abc11f2d305fcd437ba37a23d5c66627fdd992cb89fc8c6e0c
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  BookmarkMergedSurfaceOrdering
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                  • Size 6B
                                                                                                                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  BrowsingTopicsState
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                                                  • Size 649B
                                                                                                                                                  • SHA256 2e3387de9ae8f564f9e16e0ef74fa32e427977381a93f218eeedb6d5bc0ad434
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  f_000007
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007
                                                                                                                                                  • Size 345KB
                                                                                                                                                  • SHA256 af74444f93c1a87703c134e8e3a1762932e8c9ed17b5781360a51435080b8704
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  f_00001e
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
                                                                                                                                                  • Size 21KB
                                                                                                                                                  • SHA256 607da42ecc71f2129cfd47f8197104444614282c6da032919832bcb302cfeab9
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  the-real-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                  • Size 144B
                                                                                                                                                  • SHA256 28193b37e731b9b66d12316ed5d0ba1862eecb906375a4a5d7752a2c2e328fb1
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  the-real-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 c3815e84f626384b4b4de289d53928e53b31727e09705bc708d94f17cc6a7728
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Network Persistent State
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 6d19763c6930f9f74d17aab4ecce9a0900cdb7eed284b947e1ece58ce76fad83
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  SCT Auditing Pending Reports
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                  • Size 2B
                                                                                                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  Preferences
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                  • Size 11KB
                                                                                                                                                  • SHA256 1825b05b1873675b58c414c72d8fb49caa0e9216daf40b839286f9aeb2049e22
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Preferences
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                  • Size 12KB
                                                                                                                                                  • SHA256 aa377f81cde4b4e719c7937a71aa3f424b5866c080100b63ba573c58c9816cf5
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Preferences
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                  • Size 12KB
                                                                                                                                                  • SHA256 f4add32e9cef12582e6573463b496adb0c09043ceebbbded1d7f282e43870bf7
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Preferences
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                  • Size 12KB
                                                                                                                                                  • SHA256 d877a1ac61835b7708813dc8fde353d8bdde44ab2424f8116f57945830c4df0a
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Secure Preferences
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                  • Size 13KB
                                                                                                                                                  • SHA256 cbff59adc7b520f0de2985ad921ee12da5b00aa0aaadd64b2862a8b11ece7f19
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  the-real-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                  • Size 96B
                                                                                                                                                  • SHA256 d122469d20cb88aba0ea7c90fc87e13b1b35613c2c478c24409a1bcf4f864b98
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Local State
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                  • Size 261KB
                                                                                                                                                  • SHA256 dd58968175f6fcadf2ac566432e9fbddf0fb665ca8f0c862de040dd8fcb5ad60
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Local State
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                  • Size 130KB
                                                                                                                                                  • SHA256 96c3387b781c50b8968e5f76de4bc6e476c62f9d30108ad15870bbb60e2ed090
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Local State
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                  • Size 261KB
                                                                                                                                                  • SHA256 b9ef88e5744b634e3736af1020f4cd8e5050fb4a6b265df55b65bf11cd06d513
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Local State
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                  • Size 262KB
                                                                                                                                                  • SHA256 85c1dae5e8babe710f15c0489265005bb0e589ffd32e46e41e8afe14b6cfe3fa
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  data_0
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                                                                                                                                  • Size 44KB
                                                                                                                                                  • SHA256 4b9159c88cf045cec3b2e451d663c3455e365b8f0417b4899e9583ee3fd1d097
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  data_2
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
                                                                                                                                                  • Size 8KB
                                                                                                                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                  Submit Download

                                                                                                                                                  data_3
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
                                                                                                                                                  • Size 8KB
                                                                                                                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                  Submit Download

                                                                                                                                                  136.0.6008.22.manifest
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\136.0.6008.22.manifest
                                                                                                                                                  • Size 225B
                                                                                                                                                  • SHA256 f7cf7f8bc1e2a84858fc169d027458c9fa565afdc94ac9f58891f39667e05960
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  150x150Logo.scale-100.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-100.png
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  150x150Logo.scale-100_contrast-white.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  150x150Logo.scale-140.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-140.png
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  150x150Logo.scale-140_contrast-white.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  150x150Logo.scale-180.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-180.png
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  150x150Logo.scale-180_contrast-white.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  150x150Logo.scale-80.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-80.png
                                                                                                                                                  • Size 827B
                                                                                                                                                  • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  150x150Logo.scale-80_contrast-white.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                                                                                  • Size 799B
                                                                                                                                                  • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  70x70Logo.scale-100.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-100.png
                                                                                                                                                  • Size 781B
                                                                                                                                                  • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  70x70Logo.scale-100_contrast-white.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                                                                                  • Size 752B
                                                                                                                                                  • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  70x70Logo.scale-140.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-140.png
                                                                                                                                                  • Size 991B
                                                                                                                                                  • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  70x70Logo.scale-140_contrast-white.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-140_contrast-white.png
                                                                                                                                                  • Size 865B
                                                                                                                                                  • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  70x70Logo.scale-180.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-180.png
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  70x70Logo.scale-180_contrast-white.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-180_contrast-white.png
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  70x70Logo.scale-80.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-80.png
                                                                                                                                                  • Size 590B
                                                                                                                                                  • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  70x70Logo.scale-80_contrast-white.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-80_contrast-white.png
                                                                                                                                                  • Size 519B
                                                                                                                                                  • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  assistant_package
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\assistant_package
                                                                                                                                                  • Size 3.6MB
                                                                                                                                                  • SHA256 ac451192b285e40a67ab2e34f97ff86d65ee7a1f3ce1c86f048ca1c990e11331
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  d3dcompiler_47.dll
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\d3dcompiler_47.dll
                                                                                                                                                  • Size 4.5MB
                                                                                                                                                  • SHA256 a89eedc60219e5f2d35f94573945c0a3c045cfc48270624d06ef9dae7c359257
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  dxcompiler.dll
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\dxcompiler.dll
                                                                                                                                                  • Size 24.6MB
                                                                                                                                                  • SHA256 7a553cb8cf74a12b673dd7dd9acc21bee22cbaed39b8a53fbab059f48edf1e4e
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  dxil.dll
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\dxil.dll
                                                                                                                                                  • Size 1.5MB
                                                                                                                                                  • SHA256 c7083c71cacaa9bcf0a1b686f56186cdfe41fdb1be39ab50e1c48d579870a67d
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  files_list
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\files_list
                                                                                                                                                  • Size 6KB
                                                                                                                                                  • SHA256 153ba8d7191054c8eb8b180a8f5b5b1c8dc47d0c642331beb8919a67e922e3e9
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  installer.exe
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
                                                                                                                                                  • Size 8.0MB
                                                                                                                                                  • SHA256 3a7cd7023d780aee3c44e7502e0446807abf3f3558e1074f001e7dada324ec7a
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  installer_prefs.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 33ca419a64caddadfdd23a4f590216a8d379df0ff467414ceb252614cca3f8b9
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  opera.exe
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                  • Size 3.4MB
                                                                                                                                                  • SHA256 1287544e37d6364852070e0481ba9f207926e3a08a152ce9140d52954b919c8f
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Opera Browser.lnk
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\Opera Browser.lnk
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 677b6aef53ef765109c304c5f1d04490749ec5264da93fb658d0e59942d6b3cd
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  additional_file0.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\additional_file0.tmp
                                                                                                                                                  • Size 2.9MB
                                                                                                                                                  • SHA256 3f73fcad3e4341457014e2d3b6f2d8897626292ab63bcfbed20cc9156bc5059f
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  assistant_installer.exe
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\assistant\assistant_installer.exe
                                                                                                                                                  • Size 2.4MB
                                                                                                                                                  • SHA256 7759a3f4d694115a391420ae1ca24edeafe6f02ee4fc2dee9937d8a4b804a608
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  dbgcore.dll
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\assistant\dbgcore.dll
                                                                                                                                                  • Size 196KB
                                                                                                                                                  • SHA256 e7e395f28ceb05ed3519970190ec4f72a7489609acd1401fb6b41582cc1dcc3e
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  dbghelp.dll
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\assistant\dbghelp.dll
                                                                                                                                                  • Size 1.8MB
                                                                                                                                                  • SHA256 27dde9b1136e5c13cc16b7cfa8945a9a9f7508ad91f124961eabed06b2886c4b
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  installer_prefs_include.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\installer_prefs_include.json
                                                                                                                                                  • Size 239B
                                                                                                                                                  • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  installer_prefs_include.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\installer_prefs_include.json
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 9ebc5916d7526c2c5511cb0d584dc3db23ee4af0b17984df05918174ce5a6dc9
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  installer_prefs_include.json.backup
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\c6223bba-0401-446d-acb6-108aeee1e492 Opera Installer Temp\opera_package_202609192340031\installer_prefs_include.json.backup
                                                                                                                                                  • Size 224B
                                                                                                                                                  • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  installer.exe
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\7zS0E505BF9\installer.exe
                                                                                                                                                  • Size 8.0MB
                                                                                                                                                  • SHA256 7c9c1c49c414174606f75b1a24d4c5b0b1db84fa522d06e827d9d32e3d2e0e93
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  OpInst.exe
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                                                                                                                  • Size 2.8MB
                                                                                                                                                  • SHA256 cc89db20ee28f352ddcf7470f1b21ce172d07b2024d550fa03d5ab6097dac3d1
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  bg.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                                                                                                                  • Size 224KB
                                                                                                                                                  • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  favicon_opera_one.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_260142200\CRX_INSTALL\favicon_opera_one.png
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  manifest.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_260142200\CRX_INSTALL\manifest.json
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 ff74dc5f4b0e7c02e1001d7f21de9551f1838820e8b8841eee331975c85050db
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  service_worker.js
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_260142200\CRX_INSTALL\service_worker.js
                                                                                                                                                  • Size 92KB
                                                                                                                                                  • SHA256 fbc01eed9932cf21ec97b68331689b7b6a5f3631eb34177ee4ca495f1dcc4152
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3940_260142200\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                                                                                                  • Size 4.6MB
                                                                                                                                                  • SHA256 04765ec8a2155e15928e6784d754a04876cd97d937fed67683d276414530758d
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  47f9f2e3-273f-4aa1-a231-81453ca3c9aa.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6744_1003225749\47f9f2e3-273f-4aa1-a231-81453ca3c9aa.tmp
                                                                                                                                                  • Size 2.6MB
                                                                                                                                                  • SHA256 19bc35ca347a6560c0183e56da6bee3353737e78aa9eff9111c5ebd897b0cfd5
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Icon_Light_Neutral.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6744_1003225749\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  37cb80ce-c43b-40f6-9684-cd4f454ccb8d.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6744_515106184\37cb80ce-c43b-40f6-9684-cd4f454ccb8d.tmp
                                                                                                                                                  • Size 13KB
                                                                                                                                                  • SHA256 ce8adf970c3290b7ea94c85727c5abe7eb232e16026a1f8f876ad7f3ec03573d
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  f06370e8-1241-4442-ab59-b6030a8dc8c0.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6744_890492568\f06370e8-1241-4442-ab59-b6030a8dc8c0.tmp
                                                                                                                                                  • Size 46KB
                                                                                                                                                  • SHA256 0443bab24dce89bd68e06dba7f4335db89e70cf99ac92a0919d5df35a2c3cf93
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir9032_1338883599\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                  • Size 401B
                                                                                                                                                  • SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir9032_1338883599\CRX_INSTALL\_locales\en_GB\messages.json
                                                                                                                                                  • Size 387B
                                                                                                                                                  • SHA256 554cbb0514a7897ebe50043e0de9fabfcf321dcbd3c39e77cb96e62d871c7bc3
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir9032_1338883599\CRX_INSTALL\_locales\es_419\messages.json
                                                                                                                                                  • Size 424B
                                                                                                                                                  • SHA256 b04b308252b490b9555e5e002c5c6da63f3a6d517e2f659a626a500467e21100
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  manifest.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir9032_1338883599\CRX_INSTALL\manifest.json
                                                                                                                                                  • Size 4KB
                                                                                                                                                  • SHA256 dee09929862d037e825b73576a80272b344d7c8e90a3d245a658f5b54486e9d7
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  pipeline.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir9032_1338883599\CRX_INSTALL\source\shaders\pipeline.json
                                                                                                                                                  • Size 146B
                                                                                                                                                  • SHA256 9e4ae1e22f4ebc23b914d04a4d0cd0b79639dfa609d830b62cc0285dc4a95bba
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  accent.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir9032_1338883599\CRX_INSTALL\wallpaper\color_picker\accent.png
                                                                                                                                                  • Size 99KB
                                                                                                                                                  • SHA256 0ba039580d11744514f1734bd6ed144bcd8ef605f61b9c4c2fa300a5afae3348
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  background.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir9032_1338883599\CRX_INSTALL\wallpaper\color_picker\background.png
                                                                                                                                                  • Size 70KB
                                                                                                                                                  • SHA256 44cb4f1b7692d39f251bd2dd24352fff8ce8d9b2bcc47506e642ee4dd3f96f11
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  additional_file2.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir9032_1338883599\additional_file2.tmp
                                                                                                                                                  • Size 937KB
                                                                                                                                                  • SHA256 73355e09adb2bbb96a8e146e1098ad18036d58353d87f78cf4e6183c1f8fa8a6
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  settings.dat
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                                                                                  • Size 40B
                                                                                                                                                  • SHA256 5c000bf7679e9c37ffaf60bee5187145346f071975c29516219945e05616fac6
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  6e70f9ab-e369-43bf-a138-16451ece0510.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\6e70f9ab-e369-43bf-a138-16451ece0510.tmp
                                                                                                                                                  • Size 171B
                                                                                                                                                  • SHA256 711f76135b76404942bc61cad78c30dadb202adac99ae048ad646c17b203e150
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  708aeaee-9adf-479b-9830-d36d7bdbaf11.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\708aeaee-9adf-479b-9830-d36d7bdbaf11.tmp
                                                                                                                                                  • Size 203B
                                                                                                                                                  • SHA256 2473e47bdd9792594b9af2b9cf4fc3141b287ef70b34ec3e08a5b07469f46fa0
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  8daa421c-b925-489e-8a57-75dd265919bc.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\8daa421c-b925-489e-8a57-75dd265919bc.tmp
                                                                                                                                                  • Size 456B
                                                                                                                                                  • SHA256 7211b391b357e358be76a052fb53a5840f1a7fd2845ce38a173c5f0cf251b395
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Bookmarks
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                                                                                                  • Size 36KB
                                                                                                                                                  • SHA256 8b21a8adfb2f2d8ae8cfe975c90dfaf93ea2d803b1758c84daf5ac18a076ec5e
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  BookmarksExtras
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                                                                                                  • Size 173KB
                                                                                                                                                  • SHA256 79d6f3198a3cdc3189e9a6ee063c869f3fe8d6f9b56c6b2d13dfe4b3fc5d99f1
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  BookmarksExtras15f752a9-a4cc-46e3-8734-2d19f0c461f4.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras15f752a9-a4cc-46e3-8734-2d19f0c461f4.tmp
                                                                                                                                                  • Size 2B
                                                                                                                                                  • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  the-real-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                  • Size 48B
                                                                                                                                                  • SHA256 7e056c1c8933cfa701ad5f5f756f9c66dc07ec9bf0b27026149a916b82c5c209
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  the-real-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                  • Size 336B
                                                                                                                                                  • SHA256 1dbe8243b9d7c3e5ae7540f5b0d0dd9773162b28cbfc80a2fdd4cbc5acc7ea7f
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  the-real-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                  • Size 360B
                                                                                                                                                  • SHA256 5f7d905f329fe3ae8a8f88402bb88efabad845d38c729223f8bd7b3d6826cf62
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  MANIFEST-000001
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                                                                                                                                  • Size 41B
                                                                                                                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  reader_mode.js
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir3940_1509760326\CRX_INSTALL\reader_mode.js
                                                                                                                                                  • Size 112KB
                                                                                                                                                  • SHA256 3c204f797b384a8c3d0ae17aeb9c03e1bbeb00c754ccdedce63c5b5db2d3c2cc
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  spotify_frame_interceptor.js
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir3940_1509760326\CRX_INSTALL\spotify_frame_interceptor.js
                                                                                                                                                  • Size 5KB
                                                                                                                                                  • SHA256 2f0ee3a9b37faa398b8719efe7e954b19bad9b36dffb8a35c6f58237e16f76f3
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\bg\messages.json
                                                                                                                                                  • Size 580B
                                                                                                                                                  • SHA256 f1b238d97566981d936945e64c0066b1d4fd3f6392c16ac0463d3b46fd468714
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\bn\messages.json
                                                                                                                                                  • Size 809B
                                                                                                                                                  • SHA256 80a4c1efe951aa776823557a3c49b8fcd62af49a14380a318818e3d0fddd214f
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\ca\messages.json
                                                                                                                                                  • Size 423B
                                                                                                                                                  • SHA256 f94aaf624b73b7969b44341b56e593ffa6deccd92169d1bac059000db337acac
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\cs\messages.json
                                                                                                                                                  • Size 407B
                                                                                                                                                  • SHA256 2819387ac23ec4550a3778be820522a7fbf0d36d4859c0c057eddb199e4e41d9
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\da\messages.json
                                                                                                                                                  • Size 393B
                                                                                                                                                  • SHA256 3f9a707d9d1489662efc26127b48b5eaf4df20e32b40b73d4a334b772f0c92c4
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\de\messages.json
                                                                                                                                                  • Size 425B
                                                                                                                                                  • SHA256 18093b5c5134109d7e7528fa6a92ed1adf36b351fc32f37158bc88064e541a0b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\el\messages.json
                                                                                                                                                  • Size 624B
                                                                                                                                                  • SHA256 6f10347307c2d5c1fab911bc6ce07c6edea922bb0ec575cc908bdfd4accbec8d
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\fi\messages.json
                                                                                                                                                  • Size 412B
                                                                                                                                                  • SHA256 f886a0f236c6741488d6b001717f1b50dc36863365ee42692b3cf36abbc2334e
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\fil\messages.json
                                                                                                                                                  • Size 423B
                                                                                                                                                  • SHA256 2c5501932616f21b4523f18bbbffff896a16e993b2a482bb8a8961e8d15b20d4
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\fr\messages.json
                                                                                                                                                  • Size 435B
                                                                                                                                                  • SHA256 6c5b067f98cf71722061022118e825cb753050833c1079c06809c1eb92e68737
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\hi\messages.json
                                                                                                                                                  • Size 700B
                                                                                                                                                  • SHA256 7ef2c7ab8bb7f1fb2b52901fc7a7f0e09eac95a6ef1bfea818dace4484fdcba7
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\hr\messages.json
                                                                                                                                                  • Size 423B
                                                                                                                                                  • SHA256 00780fca6c30710c79858b69990c0f6dddc3b2d46cb759202ce66da11c85bb6b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\hu\messages.json
                                                                                                                                                  • Size 440B
                                                                                                                                                  • SHA256 c5f9301cd0674e4a184436e5dc26879c980baf66bcf0c201b010e26325ea6e9b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\id\messages.json
                                                                                                                                                  • Size 391B
                                                                                                                                                  • SHA256 14f3c6f716b3e99165d5388121f6ed901c1f5acb05420c1573c9e513769bd26b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\it\messages.json
                                                                                                                                                  • Size 427B
                                                                                                                                                  • SHA256 50f996c101f2e54fe0f2c88172c259abe05b7705a7b13ff049fd807a4399bb23
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\ja\messages.json
                                                                                                                                                  • Size 504B
                                                                                                                                                  • SHA256 db19d6d58fb03ce604d9c0840c08707d3948e16682aee6312af2a39d954c7196
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\ko\messages.json
                                                                                                                                                  • Size 440B
                                                                                                                                                  • SHA256 00b0041d93c2f2760e964a70dc3dfbbe720a3f261bda6e5ff6f052106f4628ad
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\lt\messages.json
                                                                                                                                                  • Size 428B
                                                                                                                                                  • SHA256 2a53a1eb30e70423e4c146c3ffa96ead6d1f1b154059e8de7ec7a5960f2686d1
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\lv\messages.json
                                                                                                                                                  • Size 421B
                                                                                                                                                  • SHA256 3b37352b3d148d7295cc0a124da57f7dbac4e98c19c7f31dd8abf2d97726d886
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\ms\messages.json
                                                                                                                                                  • Size 401B
                                                                                                                                                  • SHA256 0def86e8de9487a64067843a8d672c027fa1b5c59e10cc60e0f08e2128dec96d
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\nl\messages.json
                                                                                                                                                  • Size 413B
                                                                                                                                                  • SHA256 07962fa5344089532f5eca07d17319610f18b573cf2a0dd24cdef3b3261e6477
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\no\messages.json
                                                                                                                                                  • Size 393B
                                                                                                                                                  • SHA256 d3c23b53ef4f66d8b8730a570135a9a17f1414a15386b0d007e77287ecb788f3
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\pl\messages.json
                                                                                                                                                  • Size 431B
                                                                                                                                                  • SHA256 8a5de8af653b76691d07c35ea43c4f30c144982db249f020627cb78d9a9ed4e8
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\pt_BR\messages.json
                                                                                                                                                  • Size 419B
                                                                                                                                                  • SHA256 b292fb9f8c4a8c733e033fb8f85cc940a8b34cfdc349e7e54a3b8ec13aeac253
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\pt_PT\messages.json
                                                                                                                                                  • Size 422B
                                                                                                                                                  • SHA256 3baf77d76ae8fbeba0ac863f8e22c7d22084cf254feea227f37736f7a142b068
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\ro\messages.json
                                                                                                                                                  • Size 433B
                                                                                                                                                  • SHA256 e090811708241a42ab71f0f2e5f94c5a0e55a5d38a9ccacf7e4bd33ed8865574
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\ru\messages.json
                                                                                                                                                  • Size 609B
                                                                                                                                                  • SHA256 85017824ddfefe0789b0480bced2ae1fe1876c01b3adf7d033a16c6407d90ed6
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\sk\messages.json
                                                                                                                                                  • Size 423B
                                                                                                                                                  • SHA256 5bf2b036a0036d4bcdcc414d82b33aa83163cb9c8341f884c2648d7fa8aa333a
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\sr\messages.json
                                                                                                                                                  • Size 578B
                                                                                                                                                  • SHA256 4f724533cdf53b2ed7d49f185a43aa18b34a14170e0d67ebd61d4e745491ea02
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\sv\messages.json
                                                                                                                                                  • Size 406B
                                                                                                                                                  • SHA256 9bdc0eb2048e133c2410e2352245c5232d85c85db94a9708e493000a02762d22
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\sw\messages.json
                                                                                                                                                  • Size 422B
                                                                                                                                                  • SHA256 d487bcbfe9f0b6f87617fa6c4db5829d2de348a56417cfdafe310e5cf358c53a
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\ta\messages.json
                                                                                                                                                  • Size 778B
                                                                                                                                                  • SHA256 22d933c85b88d6b20e6ae9347fff17114320cc47cb4a6231ad88aa71394f6011
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\te\messages.json
                                                                                                                                                  • Size 796B
                                                                                                                                                  • SHA256 40c84d74e36686384d7adec3363be5b0e5a87809acae39432eddfdbc62e7dbd4
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\th\messages.json
                                                                                                                                                  • Size 666B
                                                                                                                                                  • SHA256 b80044e94b480c10470c6edf5dd260bd46540493b526130d8b2a03ea8acab41f
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\tr\messages.json
                                                                                                                                                  • Size 422B
                                                                                                                                                  • SHA256 b262410f023e09dff8b4d81d074b091a73eb394a1db13f13f2878aa0b4f3fa38
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\uk\messages.json
                                                                                                                                                  • Size 571B
                                                                                                                                                  • SHA256 0bfcebd61e9aaafc456589ce18b73af1fb1d933406bb6f11e2f765c1e3d31f12
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\vi\messages.json
                                                                                                                                                  • Size 479B
                                                                                                                                                  • SHA256 879d1c47b51ea4bba46e72a57d129331ed3b71cb6a8d545fcf5ee73a2d240840
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\zh_CN\messages.json
                                                                                                                                                  • Size 379B
                                                                                                                                                  • SHA256 7fd0ceac426fbff6088de114f2e1a238f2d6842de027217525096c674cb17e72
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  messages.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\_locales\zh_TW\messages.json
                                                                                                                                                  • Size 379B
                                                                                                                                                  • SHA256 25f70a0f5f7f5267b0ee8cd52e233f4b69f82d9cb46a3dc24c169ce4627f5841
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  background.js
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\background.js
                                                                                                                                                  • Size 264B
                                                                                                                                                  • SHA256 1eed9d8fb6eb9f836709c8f0866ffa71fd5de7b9df7d1e8da1bb9c2011196e45
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  icon.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\icon.png
                                                                                                                                                  • Size 5KB
                                                                                                                                                  • SHA256 f355f2b3167c6c63bb570444d5e2db91f08a6903339a48f30e9d8eba233396e5
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  frag.wgsl
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\source\shaders\frag.wgsl
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 a02382715dd48479a3a25186bdf3ccd41279a8ee476d9071ba9212951933a3c4
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  vert.wgsl
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\source\shaders\vert.wgsl
                                                                                                                                                  • Size 332B
                                                                                                                                                  • SHA256 2cc3a249276241a39f3b82904d56a64ffa9b6eafb0b95385f5a2442f24ce15f7
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  mainTex.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\source\textures\mainTex.png
                                                                                                                                                  • Size 139KB
                                                                                                                                                  • SHA256 05e915df1184ec1e9f3e6dcb264d25095046b04bcbc8606b3bac61f8e826cb8f
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  secTex.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\source\textures\secTex.png
                                                                                                                                                  • Size 137KB
                                                                                                                                                  • SHA256 6a7c66eef9773ec113aca4d5cd64f3f3aa49d4c534dc14fa985d707396223f2e
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  preview.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir9032_1717176690\CRX_INSTALL\wallpaper\preview.png
                                                                                                                                                  • Size 464KB
                                                                                                                                                  • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  main.js
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
                                                                                                                                                  • Size 47KB
                                                                                                                                                  • SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  logo_128.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_128.png
                                                                                                                                                  • Size 7KB
                                                                                                                                                  • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  logo_16.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_16.png
                                                                                                                                                  • Size 653B
                                                                                                                                                  • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  logo_32.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_32.png
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  logo_48.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_48.png
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  logo_64.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_64.png
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  service-worker-loader.js
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\service-worker-loader.js
                                                                                                                                                  • Size 49B
                                                                                                                                                  • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  favicon_opera_one.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.67.0.2_0\favicon_opera_one.png
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  background.js
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
                                                                                                                                                  • Size 87KB
                                                                                                                                                  • SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Icon_Light_Neutral.png
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  popup.js.LICENSE.txt
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\popup.js.LICENSE.txt
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  rules.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\rules.json
                                                                                                                                                  • Size 839B
                                                                                                                                                  • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  02688b6f-3b80-401f-8d66-f2e3f0ff0faa.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\02688b6f-3b80-401f-8d66-f2e3f0ff0faa.tmp
                                                                                                                                                  • Size 27KB
                                                                                                                                                  • SHA256 7253d2ef4fe5c071a564e8da1a9bf035b2a365d2f71fbdec15ac5d2b493c33de
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  2184dc5b-5830-47aa-9d2f-23c3e0bfc4f9.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\2184dc5b-5830-47aa-9d2f-23c3e0bfc4f9.tmp
                                                                                                                                                  • Size 27KB
                                                                                                                                                  • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  419d12b4-687b-4ca6-998a-57d84f07a4bf.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\419d12b4-687b-4ca6-998a-57d84f07a4bf.tmp
                                                                                                                                                  • Size 27KB
                                                                                                                                                  • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  65bf878f-5ecf-46e6-ab7f-47f0be55a54d.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\65bf878f-5ecf-46e6-ab7f-47f0be55a54d.tmp
                                                                                                                                                  • Size 27KB
                                                                                                                                                  • SHA256 7aca076b4b1dccb2457284a51bddb5c43eacf93224ec1f9aedcdefb1fbc9b087
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  7722b9da-328c-412d-9b0d-5baf67454ac0.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\7722b9da-328c-412d-9b0d-5baf67454ac0.tmp
                                                                                                                                                  • Size 27KB
                                                                                                                                                  • SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  c23c9813-657c-43fb-8a04-9672390116f7.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\c23c9813-657c-43fb-8a04-9672390116f7.tmp
                                                                                                                                                  • Size 27KB
                                                                                                                                                  • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Network Persistent State
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                                                                                  • Size 61B
                                                                                                                                                  • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Network Persistent Statec7c33ea2-fa2f-468a-bc98-f82f553df53d.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent Statec7c33ea2-fa2f-468a-bc98-f82f553df53d.tmp
                                                                                                                                                  • Size 111B
                                                                                                                                                  • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Preferences
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                  • Size 11KB
                                                                                                                                                  • SHA256 0dc466ef7c8d0b67932457bb8095629ef0b1c27ac71422cf87d6aa9ed9562644
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Preferences
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                  • Size 15KB
                                                                                                                                                  • SHA256 8ee4e5ba2f7f92a67855ecb61d8d06a69db60395225f90496a4a5536d6bb277a
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Preferences
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                  • Size 15KB
                                                                                                                                                  • SHA256 7bf2f596bd6172af748475a72a00be19a9bb5af2ae51655c15827b78b6873021
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Preferencesd8079451-b77b-4b91-b340-cf901eeb46f6.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferencesd8079451-b77b-4b91-b340-cf901eeb46f6.tmp
                                                                                                                                                  • Size 10KB
                                                                                                                                                  • SHA256 a62e2c5f59a74279a44c23136d3ffdc561d262f99c3bfb54188805f54899ed9f
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Secure Preferences
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                  • Size 86KB
                                                                                                                                                  • SHA256 9f85cacab3b37455a70daf0db97d89df2f129dbc90156b58748e5d6155616156
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Secure Preferences
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                  • Size 85KB
                                                                                                                                                  • SHA256 0deb3b42d09cba71fb6d61ccdaa449103eaf971e2a70b175e469d99220065874
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Secure Preferences
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                  • Size 112KB
                                                                                                                                                  • SHA256 89860d85bcd0002119bf48033aefdfa53a3d33d1e6152bf57bca76e5b56183ba
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  f936b215-4a18-4706-a517-2f6859a420f4.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\f936b215-4a18-4706-a517-2f6859a420f4.tmp
                                                                                                                                                  • Size 72B
                                                                                                                                                  • SHA256 e334d5c7f25785a3e95f1dcf3f51ad596a46015b1c882a606d4e823f12e6d0c5
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  the-real-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                  • Size 216B
                                                                                                                                                  • SHA256 5e6adb70ea562af869c88465c0d960f4e73da2f2cad3476ae52d0ea05516c2b3
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  the-real-index
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                  • Size 96B
                                                                                                                                                  • SHA256 0d79621c4f9517fb148204d97def88dc188d469e1cf2c0a4daae8e482d2ff8f2
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  6451011c-ca53-4289-832a-3f781cac9497.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\6451011c-ca53-4289-832a-3f781cac9497.tmp
                                                                                                                                                  • Size 381B
                                                                                                                                                  • SHA256 14885a0d7a8e6006219e4b7e97151461c310d9fa2ebc01e2d56e049552bc9cf7
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  afddf3e8-5e1a-4667-ade0-b6a67ed89409.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\afddf3e8-5e1a-4667-ade0-b6a67ed89409.tmp
                                                                                                                                                  • Size 381B
                                                                                                                                                  • SHA256 f81689cf99549b5665b75022a46cd7f0d781f5d6f6bee36eeeafbfc356d25446
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  fe18a73e-f757-4183-afb6-6d4bf44cf996.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\fe18a73e-f757-4183-afb6-6d4bf44cf996.tmp
                                                                                                                                                  • Size 381B
                                                                                                                                                  • SHA256 83bad2065fb06f8fc1d48c07fc5456f13baeecccba822fe3fffdb1ffcd70db02
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 11KB
                                                                                                                                                  • SHA256 fcc2b117a0a69f546e428e12a2b9bdb40231c699b8fbe7479393fbd65d69b566
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 12KB
                                                                                                                                                  • SHA256 c57264f51de09d666aa09f1cfd9a841b537d47b57666a9b8f22c895645216bc6
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 12KB
                                                                                                                                                  • SHA256 92fefc8c8f3e56fc9a65d66e4eba24ed7c950d33c03d128d2c2eec3f29fde812
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 13KB
                                                                                                                                                  • SHA256 cbb6927378e862b569f7c3e5bd77d4b38a6d2ac8c39a64470452e075ab962bbb
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 13KB
                                                                                                                                                  • SHA256 f44614648c5b7f8e9f02b2e6599712f602f84b28b1cf7b70b2f009172c59e002
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 14KB
                                                                                                                                                  • SHA256 a296208c7036dd3b2148ef70c4e0d7df7179315cccfb009e7e82293adddce2b6
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 003728a6471203e6112ee6e2deb6ea6a70663fa7412b2601c6989d807a93fa2c
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 3f6d72578b28dec376de48c17371155d4c5d226ed7cfa42b72b9a917e3661da8
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 10KB
                                                                                                                                                  • SHA256 871a702cf5dc34e1f0677e4a504a3bc5734f82164836bd93e3049c134cde409a
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 91359f631950847339ffa36cd2af956edf33133d1429d2a86b465b9672ed1ec0
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 e7a74c0102e5d89221e2ab01f3177733d95695df1aeaa6c189dc3fcaaf33c204
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 f77c1cbaab4b3969f52ba59e8c567fe08effe0ec24732e5ae1fcc93b9700231a
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 779a6d63c82878fdf5baa520a5f215f070371f1007272be31e2c4f001c717001
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 01aebe22a0a86f07959b00d6784545391acdde9ae5c7d138613a240013235aa4
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 feb923b132ad6da68b63cb63ecac0e71d4ba6bbffed57f5c0c872c3bc4582a05
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 0f976e2166a6c32624f7cd120f23a1afe29189d9540314f4827dd989e4c70a8a
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 b34c1062e74979e3fb80b582bb21aa04ee8e064ea543d27aec3354469a3ccea2
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 070b405e17e1c9849a370d4e8c479d50110bc0873881fe3d4f301776c570db1a
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 10KB
                                                                                                                                                  • SHA256 4cf58db88bdd0e05baa480e0b84da7a2e4db399b7911b7d30983bc37a43824c0
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 10KB
                                                                                                                                                  • SHA256 29fff42810c826ad2f977748e46977319bb0eb4cc24664fd64e402f3c444b832
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 10KB
                                                                                                                                                  • SHA256 f194b399d31aca2c5c7af8372b86270123b78c01c87e020cdee2d0e6f81163fb
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 10KB
                                                                                                                                                  • SHA256 4515c40af0b1879c1109d7cbb30605234f0f14b26c618a9b1268e15bcaf86cf6
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 10KB
                                                                                                                                                  • SHA256 62868c25577df6694fa4702fd829fe3fa9966fee784b9bd703f36fd70a9cd167
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 13KB
                                                                                                                                                  • SHA256 2170b9064d9a02449c7ac6a3b01060da2438c43770319b4fd92516dd78d8b24e
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 8KB
                                                                                                                                                  • SHA256 cf53b2057e8ef4256061a648317b0c51e998fd587cc9cc1898ab9203a8085dfc
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 12KB
                                                                                                                                                  • SHA256 1fa8ef3f5cc4a9a3858954f38675b5f26059171ae5b974955b47debaf34bb03c
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 8cfda9b3215902512d18326d8b545c756334ff6cd0d7bde90c2f2ea9d19e417a
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 83125ed9daa66649aabb2c3e6b239b529025a33f29573a93eb40d1c19f196270
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 4bce40b6d24465892a9f660e81892e0bfd5de7e12eb1c31b9198df7e95b494db
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 ef80458fc261e105a917ccc40606e0dfda8f0be36582709444e886715087b6c2
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 ace21cf18d381c0f94b62ef78f00e12243f1c1106e2d1bb9fe6fc212f51f79a6
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 570976eae625d0507d418f5ef8a1675430f47d53f0fe50199d77a4ec3e356314
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 af9037aaea522706ccbdd9888cfbf2d160c0f176c703f85e8a4e8d87558c5910
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 98731f91fe1bcf84eb16b2e05564dbc85360adf60fab17b423373623a2432dfd
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 6f26bf4b3d93dac6b278ba424cc659dc5837620bb0f32fdf5e98f4231b9b0e05
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 044eb8fadde25e9543fecd7c09a5a1b177e8edc5f5dda71faf9756030ad3e2a5
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 fbe44f453a3c66ffc98b80cd33802228c0433d498905637e087087e59b4a815f
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 26afee8c1ad80495fc0165b9c295363c4c29dcc5564874794c18e4d94a755d3c
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 c292b456080878e1aa17d699b32dcc6a1e812f4c1da6a2c54d1b7a3e29cf6dc8
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 05c665077dfb32c1d039987280eb75258ac94db621018ea700458b7df48f4513
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 12KB
                                                                                                                                                  • SHA256 0b9ddc746512bf80fd484992bb41e3276a0a030246c8b27086e3998866f04e9b
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 11KB
                                                                                                                                                  • SHA256 644e8f1be769ec4b1a7a7559312e6ee04a55f26d756278df5d556399a1c743de
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 11KB
                                                                                                                                                  • SHA256 4fce6b659ec186b0a18b5b035d4ec8eb8110958b3980fc87050ea0bb9fc018aa
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 13KB
                                                                                                                                                  • SHA256 36e977eaa24b0572438a59d287572354d1acccc1d4d34a28432e8577d206dc99
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 493B
                                                                                                                                                  • SHA256 e023c0661b25763bbd9f54cd34679264650eb4a5c3235ea1d4c9bce4a9436d9b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 74460cdcee8f7e086005418377f83040bc3b80aeaa93c3e272e6f5b96fd4bf45
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 dbd9f2017c06e7d46345b35627b7fe2e6123304b2569b118f32c8d7f01af3981
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 8KB
                                                                                                                                                  • SHA256 8f5a1b0e5301a770378609164be3ad818583622421c44927beae57e9350232d9
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 11KB
                                                                                                                                                  • SHA256 6a633a75619819f9d1681a024ddd8fe5e269dc3cc5a606a94fbb8906b65e9515
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 aecde1ba08eaf6fa8388dc7e15f5bdcd857d3a6d73450ca849eb6486077a14a7
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 3c08c9b8a0e263c8a97d66a9e5a192352d5a3b0161d5ce9fe1e761d026bc60db
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 10KB
                                                                                                                                                  • SHA256 c1c6a741476c6b65e0238b51ace7850007b1185af011f5fd62ef106a49cc79be
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 c63fca226a0603fd1eb1bee0ab8a71198345fb1ce11b4720edbb7f9abb18b525
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 11KB
                                                                                                                                                  • SHA256 a55f05cd987cb5d1a941d08c47b3f1bf6e8ee3e96ebf1ab20b95fddeae7e7d49
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 621B
                                                                                                                                                  • SHA256 ce663a5285cec8766455d78b9efad2f107f1c871ec61337f29853e0446daeecf
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 592817adf13267c613e451752c7950974e9927bda34536cfb05b37ad69324799
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 448273411d3dd67323da7cc34c138c6aa7d088e4941c37c50f380c08ecc2c67c
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 c17b42f2f108208344ebf9fd1cbe9b4fc75e24a1308bde308456d248956390ff
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 10KB
                                                                                                                                                  • SHA256 e3c5805be179173a8586e62129f53ab1a58743fae2ff3954fe8ba696786325dc
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 14KB
                                                                                                                                                  • SHA256 e423be335501e56acff05000b81eb2b9581e1619b254b992bfb874485fd766d4
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 749B
                                                                                                                                                  • SHA256 1d752f2c877feea253bd54d7925d02bb7b1060b6452c7d3223c8750d92e11312
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 925B
                                                                                                                                                  • SHA256 a4df4186bd306fa37281eb56c253e9a079185c5f8441e3cf10fe19558c01ad4f
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 973B
                                                                                                                                                  • SHA256 735e590d6ee5b73520e1ea3f2ee10446c9e8fb9e820cb9c09c5ded0065dd9e99
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 34f684eb36d0550b6815e7eeb605746955204d843fd98f777704fdd616a4f524
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 11KB
                                                                                                                                                  • SHA256 b134b9a25fa1d1da8b4d51bc668c3b719c7fdd17404b8adb5648ddb7f33c43c9
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 12KB
                                                                                                                                                  • SHA256 a1ee295f5fa259987d63091a3e1a38f68da63e3e26983fa26a7facab2281673e
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 593423da589efff20104e1d67147e1b08f8cf078a820aab0ad968283facd3162
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 f22a37ecfbcf957e569a783bb6f57e0612cfc25026e0055ee429a65d8c8abbd6
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 8KB
                                                                                                                                                  • SHA256 39328fa4f915b991d32fa97cfa9e36762f7044ccb0d629296ffbff6834c3382a
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 11KB
                                                                                                                                                  • SHA256 1b7812b3f429dcbe9c87a2b633aea0968b1f38a37bfd143f328a0924c85925db
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 10KB
                                                                                                                                                  • SHA256 d62f6ddf6899474302734542a5d849a3137e1bfecf2987584005575f639e07c7
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 543ee5ed49acf99573f11c506928c08913a614d05259a1fc9d5a9bd678752f4b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 9KB
                                                                                                                                                  • SHA256 5c1e7e449ebab4f486192577153196ef0b8676e16409806ac42fd120ceb762e7
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 10KB
                                                                                                                                                  • SHA256 cf6bd84095103c17ed4d7215e9e59321e5d8411b18025124367b253975e7698b
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 12KB
                                                                                                                                                  • SHA256 de9ef7d411fad645d45f7a85ba1dd61369f4e9ae1643f07e7086095dd0b44f40
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 12KB
                                                                                                                                                  • SHA256 3fbe95ce1ff46e4db712da7ae7598640e4afd58af81b41566e7bd29c3466c8e5
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 13KB
                                                                                                                                                  • SHA256 7e55dd185dfed0e2b247593de6472fbddd949894c59421f1e6ba778a88625bfb
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2239343a-a54b-44ce-a1e4-8d0e3334f4b1.raw
                                                                                                                                                  • Size 13KB
                                                                                                                                                  • SHA256 7dcc16bae2bdb1b5167069e29a4756914c52f6d12fa1f2e1d7ef2975374dab4b
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 0a40e6c9cd62951bc44e83cd15843776bc219f021bdd3a059e7185a94663a3ce
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Size 605B
                                                                                                                                                  • SHA256 acfba2d4404fab72beb6c49fc3faa82c67c76d7a3b77cb2e949ed567c4949369
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Size 941B
                                                                                                                                                  • SHA256 a21d33a920943e6e6cb472397ac8b4480da2030baf0d6a1063a12a62f5dbd442
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Size 765B
                                                                                                                                                  • SHA256 179a65fe5997cc6fc974a783fa3989d8e22d5380c3ee0b317b8617f22573bd1a
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Size 957B
                                                                                                                                                  • SHA256 cd1cac45af939baa6af0db04ddd8eddb067a247e57a852df10c5e6f8dabbd4b0
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Size 957B
                                                                                                                                                  • SHA256 118b2dd8dfaf02a96db459174a2d49139d04205c637d6b10201b8e06d6f29a66
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 482577fd9d763d0a45af8803b619e243f50a478567b8428c731d7d1aa0bad6d5
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 39204b5189578ee10ed077b91731288bda414763c3d21f4b357e08d362d1ecd8
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Size 493B
                                                                                                                                                  • SHA256 4564a75e421e4b45a5c1b02c53eaa44ddfb54d98256c16bbb211530d48f088a6
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 e5434f4d4374c01c47123c1bfbe1f75cdd6b2de221d1c196b66ca2d2f6caf817
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_60ad9136-a65f-4d34-8cfc-20cc21423bce.raw
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 e6de4a03543ba91fc19ccd61b20606d58d655818d82c7abb1bfe1f4edd93f5f2
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_9e974922-3aea-4707-b70c-3150fcb19d10.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9e974922-3aea-4707-b70c-3150fcb19d10.raw
                                                                                                                                                  • Size 493B
                                                                                                                                                  • SHA256 e008c68b78ba3ab9b8d48502c2a02f738eb8decaee2c0bac23248042fd0d4e3e
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_9e974922-3aea-4707-b70c-3150fcb19d10.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9e974922-3aea-4707-b70c-3150fcb19d10.raw
                                                                                                                                                  • Size 621B
                                                                                                                                                  • SHA256 aed3cafc0948b7d7628a70422786f3341b6e71c6f881afa7506a503986dda68e
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_9e974922-3aea-4707-b70c-3150fcb19d10.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9e974922-3aea-4707-b70c-3150fcb19d10.raw
                                                                                                                                                  • Size 637B
                                                                                                                                                  • SHA256 9a583ff17c38232e2a5c5a77a44288d7479ed9a32354e5fa5d1175d112645736
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_9e974922-3aea-4707-b70c-3150fcb19d10.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9e974922-3aea-4707-b70c-3150fcb19d10.raw
                                                                                                                                                  • Size 637B
                                                                                                                                                  • SHA256 a0107d3664d3bda0f3d5fcba8bee7d50520664f7947a31a83426c96730351cf0
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_9e974922-3aea-4707-b70c-3150fcb19d10.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9e974922-3aea-4707-b70c-3150fcb19d10.raw
                                                                                                                                                  • Size 637B
                                                                                                                                                  • SHA256 bd42ddb599ab828f563a65694b193c4d26c2211d29556fd01598ada7d0254966
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_9e974922-3aea-4707-b70c-3150fcb19d10.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9e974922-3aea-4707-b70c-3150fcb19d10.raw
                                                                                                                                                  • Size 797B
                                                                                                                                                  • SHA256 abf1f4682067f9eb702bed4b1ad3a09138d32389168df7fb85e4ccd0ca9c9162
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  session_9e974922-3aea-4707-b70c-3150fcb19d10.raw
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9e974922-3aea-4707-b70c-3150fcb19d10.raw
                                                                                                                                                  • Size 845B
                                                                                                                                                  • SHA256 0f501eb33a12f5c7531f7f2d301937cf846ae6b312ad856f32c7490533c19b4b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  CURRENT
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
                                                                                                                                                  • Size 16B
                                                                                                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  c5ccf95b-2277-4609-b7a2-ef280aa0ae88.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\c5ccf95b-2277-4609-b7a2-ef280aa0ae88.tmp
                                                                                                                                                  • Size 203B
                                                                                                                                                  • SHA256 731107607e1dde5737529c17536b2bee5ab7437932583517eeb2b7eec20640a4
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp3940.0.1955020236
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3940.0.1955020236
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 f1e24a78c6cd982b7d63ebdc16ce4dab4d78d1d28e61889df005a4df83c155bb
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp3940.0.1955020236
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3940.0.1955020236
                                                                                                                                                  • Size 265B
                                                                                                                                                  • SHA256 1e706fef57712be628027c6b3015bc7e888475a52f12fdb871367863e81fc2a7
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp3940.0.1955020236
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp3940.0.1955020236
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 bd05eca12dc31ec6d44cdc0ec4c214658a153ba4ff4a8522a5647e9ec8bce83e
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 647B
                                                                                                                                                  • SHA256 30c89bd2e0156cde21a627338965c53a43781f8fe145bfca33e0a6c3b3d980e4
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 1017B
                                                                                                                                                  • SHA256 93a27da950c0824c18c783b8326ab878f4c38d5f34dafbfd073edf2fbe8add27
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 549B
                                                                                                                                                  • SHA256 faf118c499d4ba79eb0d7d3eb2d4abb6ad668adc9babfe1a303cfea599dfe544
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 737B
                                                                                                                                                  • SHA256 241117d49696bdf1cd9da8665d86fd4f5e647b771168f1cb0ac751c101bc263a
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 827B
                                                                                                                                                  • SHA256 950a910c222ffa11352a99ee1018c997b100965bcd05d120f6c7c09a653c8bdc
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 921B
                                                                                                                                                  • SHA256 106fc72ecbf594cbadb73809dcee5dd4066bd8134cef820f35a27831d64a844d
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 20e74f6869a047aca0971b031d9be4aeadd66e61a558006881c72e86daaeca0e
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 1ac84058bbf8ced65c94a4c2a78799c0e7ec65ead654b1a6375e71fc6c96dfdb
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 997e8a716387ed0adf9b922c431ff224a10ca9e89688ec8e9ce03681e343e8e2
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 af41c02c9c0a97a480e5368a5e949ee2522260bcdd0ede53e93e6e64f5aee42b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 8738c530bce1a719e5f9d27f61eb6553a331dc9a446827532a28a8e7c886135b
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 4f2fa45b9b195f70ea85f74ab270c68bdfb788da24cafaf1b8115cc5f742c5ad
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 280d850b2df32f482b1d878fde3ffc51509366a4b5bf726a5b10b511673e43fd
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 0482871e10bddedc5611a5152c02a742e83bd5105d6e685a4cc255c202a49858
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 b220d9baa1773731f9a3b802f6fcea7e91df20b9dc486f3940794edab999b8fe
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 9d8896b83fe2d60602bc2410da50776bd2e424e52a15083b115554012e520618
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 fba837e04390714dea3a39d10a57235e21ff4866ce4474189da6866dede22680
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 141f7f0ab430aca6d602eb10ed0c7a39723c3b4b5631948e8ee16dda35d7c9bb
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 4KB
                                                                                                                                                  • SHA256 90b2dd63668d820fc92ef1536fdaee165d3610dda646016a2c020b6cf658376b
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 8e27db8683685e594745070fcd8d9344b0fb71a51b62f53d2413f9a16e0126f5
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 3d47ec16cbed2a43ecfe6c7d0fce58a4a15764f7b17e68085e2361b4ae9b9571
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.0.1840614793
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.0.1840614793
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 79612260272a95bbcf7958d0c38fb3acf194f9b819b50216baaf0a7a3bf2044c
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.1.975408243
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.1.975408243
                                                                                                                                                  • Size 200B
                                                                                                                                                  • SHA256 53b5dccd7a564919848894d8d9b0cdb7cc17c3558401ab267b119e72e60b8989
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp6744.1.975408243
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6744.1.975408243
                                                                                                                                                  • Size 224B
                                                                                                                                                  • SHA256 1afb932b7e9ecdd637bfb0be746467dec3109b8f06310a5780c30d1abb45adc2
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp9032.0.794218353
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp9032.0.794218353
                                                                                                                                                  • Size 265B
                                                                                                                                                  • SHA256 603537be2528c812a47c769444bc18ed208b7221392b3e93363617082924cbbb
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp9032.0.794218353
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp9032.0.794218353
                                                                                                                                                  • Size 1KB
                                                                                                                                                  • SHA256 5a2df44d94b54ed5bb770543415654f4820a5ee9da8c99243ef0390488fc6f68
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  ssdfp9032.0.794218353
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp9032.0.794218353
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 09ea8b20d9e213a0ec245a3308360e394d75fe7c676abc725e61b6a33b04ebae
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  suggestions_cache.json3cee5739-dba3-47b3-8368-da8fa4846318.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json3cee5739-dba3-47b3-8368-da8fa4846318.tmp
                                                                                                                                                  • Size 606KB
                                                                                                                                                  • SHA256 ab42fa6344109f5d9b9322bd76351df239ba2f1f7b2753ad9071b1153739ea46
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  data_0
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_0
                                                                                                                                                  • Size 8KB
                                                                                                                                                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                  Submit Download

                                                                                                                                                  data_1
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                                                                                                  • Size 264KB
                                                                                                                                                  • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                  Submit Download

                                                                                                                                                  Local State
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                  • Size 2KB
                                                                                                                                                  • SHA256 a1c5f054d9177cc0e0fd65c2afadf0f5a1cddc5298655071e1ece4e19e9bb7d2
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  Local State
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                  • Size 3KB
                                                                                                                                                  • SHA256 dc3f4c1b9f41a6bddd54e276701f1e8147c21107e2fba2fbf53a4504080fd7ab
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  VariationsSeedV2
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                                                                                                  • Size 19B
                                                                                                                                                  • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  VariationsSeedV2
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                                                                                                  • Size 11B
                                                                                                                                                  • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  assistant_prefs.json
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                                                                                                                                  • Size 151B
                                                                                                                                                  • SHA256 fe27a1ca81de20793c3c59eec6721c1a71177baad6c48fa624d2baff6846c974
                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                  Submit Download

                                                                                                                                                  metadata.jsona3149a38-eff9-4a9e-9101-08f4d3f5159d.tmp
                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\extensions_crx_cache\metadata.jsona3149a38-eff9-4a9e-9101-08f4d3f5159d.tmp
                                                                                                                                                  • Size 13B
                                                                                                                                                  • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                  Submit Download

                                                                                                                                                  memory/1900-3800-0x000002535FA30000-0x000002535FA31000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/1956-3867-0x000001D3EB140000-0x000001D3EB141000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/2000-3823-0x0000025C286C0000-0x0000025C286C1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/2880-982-0x0000021159E00000-0x0000021159E01000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/2880-2596-0x0000021159C50000-0x0000021159DF1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/3940-2656-0x000002168A350000-0x000002168AA79000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/4792-3831-0x000002CFAF4C0000-0x000002CFAF4C1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/5264-3833-0x00000187254A0000-0x00000187254A1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/5736-3825-0x0000024FE9720000-0x0000024FE9721000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/5928-4395-0x000001A64AB70000-0x000001A64AB71000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/6284-3836-0x0000024D99E60000-0x0000024D99E61000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/6888-2649-0x0000017B37300000-0x0000017B374A1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/6888-873-0x0000017B374B0000-0x0000017B374B1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/6888-872-0x00007FF880CA0000-0x00007FF880CA1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7224-2727-0x000001B80DAA0000-0x000001B80DAA1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7224-3313-0x000001B80D8F0000-0x000001B80DA91000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7268-4408-0x000001B7FBD10000-0x000001B7FBEB1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7268-3538-0x000001B7FBEC0000-0x000001B7FBEC1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7320-4412-0x000002DD64C30000-0x000002DD64DD1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7320-3727-0x000002DD64DE0000-0x000002DD64DE1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7324-1015-0x00000260E49B0000-0x00000260E49B1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7324-2597-0x00000260E4800000-0x00000260E49A1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7432-4403-0x000001DC78010000-0x000001DC78011000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7480-3731-0x000001910A1C0000-0x000001910A1C1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7540-3733-0x0000021DC1160000-0x0000021DC1161000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7544-3503-0x000002919CE80000-0x000002919D021000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7544-2716-0x000002919D030000-0x000002919D031000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7624-4426-0x0000021FB24E0000-0x0000021FB2681000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7624-3737-0x0000021FB2690000-0x0000021FB2691000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7656-4415-0x000001729D3F0000-0x000001729D591000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7656-3736-0x000001729D5A0000-0x000001729D5A1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7684-4427-0x0000022147E90000-0x0000022148031000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7684-3739-0x0000022148040000-0x0000022148041000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7724-3729-0x000001EA8D240000-0x000001EA8D241000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7724-4411-0x000001EA8D090000-0x000001EA8D231000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7752-3743-0x000001A6E8470000-0x000001A6E8471000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7760-4400-0x000002E7388D0000-0x000002E7388D1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7772-4171-0x000002AF858D0000-0x000002AF858D1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7856-2750-0x0000019B287A0000-0x0000019B287A1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7856-3314-0x0000019B285F0000-0x0000019B28791000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7908-3741-0x000001F754010000-0x000001F754011000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7964-2598-0x000002291C5C0000-0x000002291C761000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/7964-1367-0x000002291C770000-0x000002291C771000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8060-3725-0x0000018B48E10000-0x0000018B48E11000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8060-3837-0x0000018B48C60000-0x0000018B48E01000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8384-4167-0x0000022194F50000-0x0000022194F51000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8520-3877-0x00000178BD050000-0x00000178BD051000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8532-3529-0x000001C4020D0000-0x000001C4020D1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8556-3533-0x00000264D08C0000-0x00000264D08C1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8556-4410-0x00000264D0710000-0x00000264D08B1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8684-3541-0x000001D7DE360000-0x000001D7DE361000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8684-4404-0x000001D7DE1B0000-0x000001D7DE351000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8736-4405-0x000002BD4C4F0000-0x000002BD4C691000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8736-3543-0x000002BD4C6A0000-0x000002BD4C6A1000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8740-3535-0x00000266E2710000-0x00000266E2711000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8740-4407-0x00000266E2560000-0x00000266E2701000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8760-4409-0x000001D7A7BD0000-0x000001D7A7D71000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8760-3532-0x000001D7A7D80000-0x000001D7A7D81000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8776-3315-0x000001518ECE0000-0x000001518EE81000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8776-2839-0x000001518EE90000-0x000001518EE91000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8820-3539-0x0000024F19910000-0x0000024F19911000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8820-4406-0x0000024F19760000-0x0000024F19901000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/8968-3872-0x0000016B27F10000-0x0000016B27F11000-memory.dmp
                                                                                                                                                  Download

                                                                                                                                                  memory/9032-3504-0x00000223C4490000-0x00000223C4BB9000-memory.dmp
                                                                                                                                                  Download