Overview

overview

8

Static

static

8

OperaInstaller.exe

windows10-2004-x64

8

OperaInstaller.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    136s
  • max time network
    166s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/09/2026, 22:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample260922-17ppcage69
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoverypersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Adds Run key to start application 2 TTPs 4 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 10 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 6 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 48 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 10 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3332
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2160
      • C:\Users\Admin\AppData\Local\Temp\7zS078B36E9\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS078B36E9\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:4696
        • C:\Users\Admin\AppData\Local\Temp\7zS078B36E9\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS078B36E9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff7e10269d8,0x7ff7e10269e8,0x7ff7e10269f8
          4⤵
          • Executes dropped EXE
          PID:3508
        • C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:3408
        • C:\Users\Admin\AppData\Local\Temp\7zS078B36E9\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS078B36E9\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=4696 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_20260922231818" --session-guid=3cef4286-2a1b-4c15-a00e-34dac8b8b0c6 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=EC08000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:5724
          • C:\Users\Admin\AppData\Local\Temp\7zS078B36E9\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS078B36E9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x2b8,0x2bc,0x2c0,0x288,0x2c4,0x7ff7e10269d8,0x7ff7e10269e8,0x7ff7e10269f8
            5⤵
            • Executes dropped EXE
            PID:568
          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe" --backend --initial-pid=4696 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181" --session-guid=3cef4286-2a1b-4c15-a00e-34dac8b8b0c6 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=136.0.6008.22
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Enumerates system info in registry
            • Modifies registry class
            • Suspicious use of WriteProcessMemory
            PID:3616
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x2b4,0x2b8,0x2bc,0x294,0x2c0,0x7ff6981669d8,0x7ff6981669e8,0x7ff6981669f8
              6⤵
              • Executes dropped EXE
              PID:1892
            • C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:4620
              • C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xdbc9cc,0xdbc9d8,0xdbc9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:4740
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:5888
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x71c9cc,0x71c9d8,0x71c9e4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:3068
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:1068
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:1408
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x27c,0x280,0x284,0x278,0x288,0x7ffee477ed30,0x7ffee477ed40,0x7ffee477ed50
                      10⤵
                      • Executes dropped EXE
                      PID:3256
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:4652
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffee477ed30,0x7ffee477ed40,0x7ffee477ed50
                      10⤵
                      • Executes dropped EXE
                      PID:1144
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x2a4,0x2a8,0x2ac,0x254,0x2b0,0x8d7324,0x8d7330,0x8d733c
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:4596
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:5068
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffee477ed30,0x7ffee477ed40,0x7ffee477ed50
                        11⤵
                        • Executes dropped EXE
                        PID:1168
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:2964
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffee477ed30,0x7ffee477ed40,0x7ffee477ed50
                        11⤵
                        • Executes dropped EXE
                        PID:5460
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:4852
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffee477ed30,0x7ffee477ed40,0x7ffee477ed50
                        11⤵
                        • Executes dropped EXE
                        PID:3568
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:6108
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffee477ed30,0x7ffee477ed40,0x7ffee477ed50
                7⤵
                • Executes dropped EXE
                PID:2928
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1636,i,9360802208731502996,2486280278669404638,262144 --field-trial-handle=1912,i,17271477666035194157,14545605472205853354,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,8346341699940619197,12279204309905517456,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1908 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:1092
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1936,i,13196325904945922456,3910282807719837062,524288 --field-trial-handle=1912,i,17271477666035194157,14545605472205853354,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,8346341699940619197,12279204309905517456,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2104 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                • Enumerates system info in registry
                PID:2752
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2520,i,9149335479252507367,12644526691742872227,524288 --field-trial-handle=1912,i,17271477666035194157,14545605472205853354,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,8346341699940619197,12279204309905517456,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2504 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4952
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3528,i,2360264936024913674,9904359128985649043,2097152 --field-trial-handle=1912,i,17271477666035194157,14545605472205853354,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,8346341699940619197,12279204309905517456,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3604 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:1868
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3648,i,13801427538458898314,17925957913478501390,2097152 --field-trial-handle=1912,i,17271477666035194157,14545605472205853354,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,8346341699940619197,12279204309905517456,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3876 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5840
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4020,i,2199944747932359776,11476273640509973452,524288 --field-trial-handle=1912,i,17271477666035194157,14545605472205853354,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,8346341699940619197,12279204309905517456,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4036 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4268
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4740,i,13787691932513682554,9713848358145902398,524288 --field-trial-handle=1912,i,17271477666035194157,14545605472205853354,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,8346341699940619197,12279204309905517456,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4716 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:4136
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4884,i,2988566726463316762,17758161701858617608,524288 --field-trial-handle=1912,i,17271477666035194157,14545605472205853354,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,8346341699940619197,12279204309905517456,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4024 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5464
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5204,i,11428495366310694283,1390101825420249768,2097152 --field-trial-handle=1912,i,17271477666035194157,14545605472205853354,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,8346341699940619197,12279204309905517456,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5244 /prefetch:1
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4916
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4896,i,9051346910893574669,13027952644833620462,524288 --field-trial-handle=1912,i,17271477666035194157,14545605472205853354,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1916,i,8346341699940619197,12279204309905517456,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5216 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7072
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\additional_file2.tmp"
              6⤵
              • Executes dropped EXE
              • Adds Run key to start application
              • Drops file in Windows directory
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:2756
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffee477ed30,0x7ffee477ed40,0x7ffee477ed50
                7⤵
                • Executes dropped EXE
                PID:4124
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1720,i,9779365233889827515,5973468987641690940,262144 --field-trial-handle=2088,i,5290838299944669208,7796354243743630669,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,14080207327288753205,9354266282141204378,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2084 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6360
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1896,i,9960036636636878367,10762910251357652729,524288 --field-trial-handle=2088,i,5290838299944669208,7796354243743630669,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,14080207327288753205,9354266282141204378,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2176 /prefetch:11
                7⤵
                • Executes dropped EXE
                • System Time Discovery
                • Enumerates system info in registry
                PID:6356
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2544,i,2055313534602014,5132342764526063578,524288 --field-trial-handle=2088,i,5290838299944669208,7796354243743630669,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,14080207327288753205,9354266282141204378,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2560 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6472
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3028,i,14312440550893853214,12797539208438418989,2097152 --field-trial-handle=2088,i,5290838299944669208,7796354243743630669,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,14080207327288753205,9354266282141204378,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4192 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6720
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=4000,i,2414453077541011358,15264577067055132017,2097152 --field-trial-handle=2088,i,5290838299944669208,7796354243743630669,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,14080207327288753205,9354266282141204378,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=4136 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6732
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4056,i,690824856221349268,13836128532019299369,524288 --field-trial-handle=2088,i,5290838299944669208,7796354243743630669,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,14080207327288753205,9354266282141204378,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4168 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6724
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3936,i,9604186637436466179,7703094401674052393,524288 --field-trial-handle=2088,i,5290838299944669208,7796354243743630669,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,14080207327288753205,9354266282141204378,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4816 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:4960
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4836,i,734585006198992723,18079819113095997874,524288 --field-trial-handle=2088,i,5290838299944669208,7796354243743630669,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,14080207327288753205,9354266282141204378,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=5048 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:1276
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4084,i,15967901801141991568,7296336362961048091,524288 --field-trial-handle=2088,i,5290838299944669208,7796354243743630669,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,14080207327288753205,9354266282141204378,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4804 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:4788
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Adds Run key to start application
              • Drops file in Windows directory
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of WriteProcessMemory
              PID:6760
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffee477ed30,0x7ffee477ed40,0x7ffee477ed50
                7⤵
                  PID:6448
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1636,i,4025657799270751649,13833323411644657525,262144 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2196 /prefetch:2
                  7⤵
                    PID:3000
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1920,i,17369874769701078320,1678961796011948390,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2224 /prefetch:11
                    7⤵
                    • System Time Discovery
                    PID:1156
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2516,i,3386379400934421720,5279631392300396960,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2688 /prefetch:13
                    7⤵
                      PID:3096
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2740,i,6498703932972792298,15926204188390251710,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3324 /prefetch:14
                      7⤵
                        PID:6192
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3248,i,8292295847064700038,9646417966104601197,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3344 /prefetch:14
                        7⤵
                          PID:3732
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3260,i,17952677400058196607,9559707542722631963,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3364 /prefetch:14
                          7⤵
                            PID:4308
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3296,i,9279369746650085535,16536995571954435227,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3420 /prefetch:14
                            7⤵
                              PID:2384
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3308,i,9376441239468609771,14906435716271298887,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3440 /prefetch:14
                              7⤵
                                PID:5820
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3272,i,6728438366294216389,478125879179934796,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3316 /prefetch:14
                                7⤵
                                  PID:6628
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3284,i,2251813662291380483,1982076926903966603,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3400 /prefetch:14
                                  7⤵
                                    PID:3744
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3860,i,8759439086817786546,12370439053709014449,2097152 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3952 /prefetch:1
                                    7⤵
                                      PID:1640
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_gx_splash.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                                      7⤵
                                        PID:7064
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4788,i,14644772669729202471,3283398688532397997,2097152 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4800 /prefetch:9
                                        7⤵
                                          PID:6828
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4964,i,14148914359164367831,8082590754980081708,2097152 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4968 /prefetch:1
                                          7⤵
                                            PID:6960
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5268,i,13436896722066230778,16949461011037739503,2097152 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5264 /prefetch:1
                                            7⤵
                                              PID:6784
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5300,i,114451715796944102,4388553972522059642,2097152 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5416 /prefetch:1
                                              7⤵
                                                PID:1864
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6252,i,10497924103417402489,14991322659454856871,2097152 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6580 /prefetch:9
                                                7⤵
                                                  PID:2552
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6876,i,16208491714375764636,12143688106332508166,2097152 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=7000 /prefetch:9
                                                  7⤵
                                                    PID:6324
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6852,i,10346483274188312364,13060965682149804718,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6868 /prefetch:12
                                                    7⤵
                                                      PID:1328
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6788,i,10930053776461281279,1869991143854913290,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=5784 /prefetch:14
                                                      7⤵
                                                        PID:6316
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7296,i,13397108620210023965,5616408728979016606,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6484 /prefetch:14
                                                        7⤵
                                                          PID:6368
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7396,i,8199318742484001402,10372527052365501756,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7372 /prefetch:14
                                                          7⤵
                                                            PID:6500
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7408,i,6447678614465521985,8979465231773593025,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7412 /prefetch:14
                                                            7⤵
                                                              PID:1276
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7676,i,8158060589230229443,4401423680773646631,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7564 /prefetch:14
                                                              7⤵
                                                                PID:4088
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7716,i,3045658036697800118,9760413306578988282,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7712 /prefetch:14
                                                                7⤵
                                                                  PID:5456
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7952,i,8075547944293484971,9352542282409921822,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7972 /prefetch:14
                                                                  7⤵
                                                                    PID:6132
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8116,i,8633118940251431575,11739552816076128448,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8124 /prefetch:14
                                                                    7⤵
                                                                      PID:2284
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8252,i,2540593895515001408,313359514026731605,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8268 /prefetch:14
                                                                      7⤵
                                                                        PID:3704
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8392,i,12490435421270811593,1076714294076439668,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8404 /prefetch:14
                                                                        7⤵
                                                                          PID:3244
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8412,i,4500620405637233698,6801588192448057311,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8544 /prefetch:14
                                                                          7⤵
                                                                            PID:3012
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8672,i,3371647538642910090,4941253910912176151,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8684 /prefetch:14
                                                                            7⤵
                                                                              PID:6720
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --metrics-shmem-handle=8900,i,3581768652196701425,13251977953688828396,2097152 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8988 /prefetch:9
                                                                              7⤵
                                                                                PID:5380
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8876,i,12877991026439072110,8193276827390216812,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=9008 /prefetch:14
                                                                                7⤵
                                                                                  PID:1076
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8956,i,14207830661104446945,276046084616518605,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9048 /prefetch:14
                                                                                  7⤵
                                                                                    PID:2796
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8944,i,10276985529124156483,4449836120282648554,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9028 /prefetch:14
                                                                                    7⤵
                                                                                      PID:3556
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8968,i,9232380045127633731,17168705134609642597,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9072 /prefetch:14
                                                                                      7⤵
                                                                                        PID:5952
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9056,i,13265619669725520843,16080168086762024444,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9156 /prefetch:14
                                                                                        7⤵
                                                                                          PID:5064
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9828,i,4667460991727514697,668718494920335713,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9820 /prefetch:14
                                                                                          7⤵
                                                                                            PID:2452
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9888,i,11653443569938124284,917371353098325620,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9920 /prefetch:14
                                                                                            7⤵
                                                                                              PID:4464
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=9928,i,7868307668565457786,4344405363830848812,2097152 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10108 /prefetch:1
                                                                                              7⤵
                                                                                                PID:2596
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10428,i,7115471236770096684,11181878776651203934,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10344 /prefetch:14
                                                                                                7⤵
                                                                                                  PID:8664
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                                                                                  7⤵
                                                                                                    PID:9024
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff6a19c5598,0x7ff6a19c55a8,0x7ff6a19c55b8
                                                                                                      8⤵
                                                                                                        PID:7300
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3860,i,15917620428393402386,6230576243182197379,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=9080 /prefetch:14
                                                                                                      7⤵
                                                                                                        PID:9032
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9140,i,10137500273839055318,10632386600167205582,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=9540 /prefetch:14
                                                                                                        7⤵
                                                                                                          PID:9100
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10932,i,15958383187049942870,12716941910817030500,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10924 /prefetch:14
                                                                                                          7⤵
                                                                                                            PID:9156
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11052,i,9608973590577326949,11096099326722840856,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11064 /prefetch:14
                                                                                                            7⤵
                                                                                                              PID:9176
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=11100,i,5845455948139831850,8394178621561352915,2097152 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11088 /prefetch:1
                                                                                                              7⤵
                                                                                                                PID:9192
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11536,i,14879042436043779832,12600231657634908777,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11556 /prefetch:14
                                                                                                                7⤵
                                                                                                                  PID:7408
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11684,i,13421779601602666542,6117588707497421224,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=11700 /prefetch:14
                                                                                                                  7⤵
                                                                                                                    PID:7520
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11832,i,9118956968571801328,8132184259564110631,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=11844 /prefetch:14
                                                                                                                    7⤵
                                                                                                                      PID:7580
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6452,i,9361622211913656459,10210143859824850390,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=8012 /prefetch:14
                                                                                                                      7⤵
                                                                                                                        PID:2488
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12108,i,13249401467090166723,10252474380316850663,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=12120 /prefetch:14
                                                                                                                        7⤵
                                                                                                                          PID:8656
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8112,i,12777231590730434458,7156268192315112308,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=12248 /prefetch:14
                                                                                                                          7⤵
                                                                                                                            PID:8360
                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6456,i,9689154977059740541,4843795847822252275,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=12372 /prefetch:14
                                                                                                                            7⤵
                                                                                                                              PID:8480
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12268,i,275623036080972455,11705996626390483297,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=12536 /prefetch:14
                                                                                                                              7⤵
                                                                                                                                PID:8508
                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12660,i,1365983261307743511,13447783300914284349,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=12672 /prefetch:14
                                                                                                                                7⤵
                                                                                                                                  PID:8620
                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12720,i,8208492754991830226,10367814535698043633,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=12836 /prefetch:14
                                                                                                                                  7⤵
                                                                                                                                    PID:8128
                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9920,i,9786626939498766942,11153197254101805589,524288 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=10016 /prefetch:14
                                                                                                                                    7⤵
                                                                                                                                      PID:9188
                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=13000,i,13461724033778663075,9080027974001360164,2097152 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=13012 /prefetch:9
                                                                                                                                      7⤵
                                                                                                                                        PID:9136
                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=13036,i,14652887244125477340,16108210784037462340,2097152 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=13040 /prefetch:9
                                                                                                                                        7⤵
                                                                                                                                          PID:8240
                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=4108,i,9950264403938267734,6962143302792859691,2097152 --field-trial-handle=2168,i,17240888598884799421,529721799340189537,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,16490077831315124936,15056583682991729774,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=4192 /prefetch:9
                                                                                                                                          7⤵
                                                                                                                                            PID:8140
                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\assistant\Assistant_136.0.6008.22_Setup.exe_sfx.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\assistant\Assistant_136.0.6008.22_Setup.exe_sfx.exe"
                                                                                                                                      4⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      PID:2060
                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\assistant\assistant_installer.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\assistant\assistant_installer.exe" --version
                                                                                                                                      4⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      • Loads dropped DLL
                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                      • Enumerates system info in registry
                                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                                      PID:5452
                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\assistant\assistant_installer.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x24c,0x250,0x254,0x214,0x258,0xdbc9cc,0xdbc9d8,0xdbc9e4
                                                                                                                                        5⤵
                                                                                                                                        • Executes dropped EXE
                                                                                                                                        • Loads dropped DLL
                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                        PID:5340
                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                                                1⤵
                                                                                                                                • Executes dropped EXE
                                                                                                                                • Loads dropped DLL
                                                                                                                                • System Location Discovery: System Language Discovery
                                                                                                                                • Enumerates system info in registry
                                                                                                                                • Suspicious use of FindShellTrayWindow
                                                                                                                                • Suspicious use of SendNotifyMessage
                                                                                                                                • Suspicious use of WriteProcessMemory
                                                                                                                                PID:4484
                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                  2⤵
                                                                                                                                  • Executes dropped EXE
                                                                                                                                  • Loads dropped DLL
                                                                                                                                  • Enumerates system info in registry
                                                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                                                  PID:5672
                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffee477ed30,0x7ffee477ed40,0x7ffee477ed50
                                                                                                                                    3⤵
                                                                                                                                    • Executes dropped EXE
                                                                                                                                    PID:4604
                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                  2⤵
                                                                                                                                  • Executes dropped EXE
                                                                                                                                  • Loads dropped DLL
                                                                                                                                  • Enumerates system info in registry
                                                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                                                  PID:5592
                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffee477ed30,0x7ffee477ed40,0x7ffee477ed50
                                                                                                                                    3⤵
                                                                                                                                    • Executes dropped EXE
                                                                                                                                    PID:5512
                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x2c0,0x2c4,0x2c8,0x29c,0x2cc,0x8d7324,0x8d7330,0x8d733c
                                                                                                                                  2⤵
                                                                                                                                  • Executes dropped EXE
                                                                                                                                  • Loads dropped DLL
                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                                                  PID:1120
                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                    3⤵
                                                                                                                                    • Executes dropped EXE
                                                                                                                                    • Loads dropped DLL
                                                                                                                                    • Enumerates system info in registry
                                                                                                                                    • Suspicious use of WriteProcessMemory
                                                                                                                                    PID:4072
                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffee477ed30,0x7ffee477ed40,0x7ffee477ed50
                                                                                                                                      4⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      PID:6064
                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                    3⤵
                                                                                                                                    • Executes dropped EXE
                                                                                                                                    • Loads dropped DLL
                                                                                                                                    • Enumerates system info in registry
                                                                                                                                    • Suspicious use of WriteProcessMemory
                                                                                                                                    PID:4432
                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x284,0x288,0x28c,0x280,0x290,0x7ffee477ed30,0x7ffee477ed40,0x7ffee477ed50
                                                                                                                                      4⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      PID:4344
                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                    3⤵
                                                                                                                                    • Executes dropped EXE
                                                                                                                                    • Loads dropped DLL
                                                                                                                                    • Enumerates system info in registry
                                                                                                                                    • Suspicious use of WriteProcessMemory
                                                                                                                                    PID:1416
                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x284,0x288,0x28c,0x280,0x290,0x7ffee477ed30,0x7ffee477ed40,0x7ffee477ed50
                                                                                                                                      4⤵
                                                                                                                                      • Executes dropped EXE
                                                                                                                                      PID:2420
                                                                                                                              • C:\Windows\system32\svchost.exe
                                                                                                                                C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                1⤵
                                                                                                                                  PID:5960
                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                                                                                                  1⤵
                                                                                                                                  • Executes dropped EXE
                                                                                                                                  • Loads dropped DLL
                                                                                                                                  • Enumerates system info in registry
                                                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                                                  PID:4908
                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe
                                                                                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffee477ed30,0x7ffee477ed40,0x7ffee477ed50
                                                                                                                                    2⤵
                                                                                                                                    • Executes dropped EXE
                                                                                                                                    PID:5336
                                                                                                                                • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                                  C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                                  1⤵
                                                                                                                                    PID:3464
                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                                                                                    1⤵
                                                                                                                                      PID:9116
                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.22 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff6a19c5598,0x7ff6a19c55a8,0x7ff6a19c55b8
                                                                                                                                        2⤵
                                                                                                                                          PID:7384
                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                                                                                                          2⤵
                                                                                                                                            PID:8544

                                                                                                                                        Network

                                                                                                                                              MITRE ATT&CK Enterprise v16

                                                                                                                                              Reconnaissance

                                                                                                                                              Resource Development

                                                                                                                                              Initial Access

                                                                                                                                              Execution

                                                                                                                                              Persistence

                                                                                                                                              Boot or Logon Autostart Execution

                                                                                                                                              1
                                                                                                                                              T1547

                                                                                                                                              Registry Run Keys / Startup Folder

                                                                                                                                              1
                                                                                                                                              T1547.001

                                                                                                                                              Event Triggered Execution

                                                                                                                                              1
                                                                                                                                              T1546

                                                                                                                                              Component Object Model Hijacking

                                                                                                                                              1
                                                                                                                                              T1546.015

                                                                                                                                              Privilege Escalation

                                                                                                                                              Boot or Logon Autostart Execution

                                                                                                                                              1
                                                                                                                                              T1547

                                                                                                                                              Registry Run Keys / Startup Folder

                                                                                                                                              1
                                                                                                                                              T1547.001

                                                                                                                                              Event Triggered Execution

                                                                                                                                              1
                                                                                                                                              T1546

                                                                                                                                              Component Object Model Hijacking

                                                                                                                                              1
                                                                                                                                              T1546.015

                                                                                                                                              Defense Evasion

                                                                                                                                              Modify Registry

                                                                                                                                              2
                                                                                                                                              T1112

                                                                                                                                              Credential Access

                                                                                                                                              Credentials from Password Stores

                                                                                                                                              1
                                                                                                                                              T1555

                                                                                                                                              Credentials from Web Browsers

                                                                                                                                              1
                                                                                                                                              T1555.003

                                                                                                                                              Unsecured Credentials

                                                                                                                                              1
                                                                                                                                              T1552

                                                                                                                                              Credentials In Files

                                                                                                                                              1
                                                                                                                                              T1552.001

                                                                                                                                              Discovery

                                                                                                                                              Peripheral Device Discovery

                                                                                                                                              1
                                                                                                                                              T1120

                                                                                                                                              Query Registry

                                                                                                                                              5
                                                                                                                                              T1012

                                                                                                                                              System Information Discovery

                                                                                                                                              4
                                                                                                                                              T1082

                                                                                                                                              System Location Discovery

                                                                                                                                              1
                                                                                                                                              T1614

                                                                                                                                              System Language Discovery

                                                                                                                                              1
                                                                                                                                              T1614.001

                                                                                                                                              System Time Discovery

                                                                                                                                              1
                                                                                                                                              T1124

                                                                                                                                              Lateral Movement

                                                                                                                                              Collection

                                                                                                                                              Data from Local System

                                                                                                                                              1
                                                                                                                                              T1005

                                                                                                                                              Command and Control

                                                                                                                                              Exfiltration

                                                                                                                                              Impact

                                                                                                                                              Replay Monitor

                                                                                                                                              Loading Replay Monitor...

                                                                                                                                              Downloads

                                                                                                                                              E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                              • Size 471B
                                                                                                                                              • SHA256 98fc90154e052468232e5d7a37fcdd1df140759063ebe1ac0135cac266bd8dc2
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                              • Size 416B
                                                                                                                                              • SHA256 b04185d73f5c0f98a28e1902ce1e15c6e4e18c9ea4f83d0637b03c1bd8e8867d
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              data_0
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                                                                                                                              • Size 44KB
                                                                                                                                              • SHA256 cd6c91ecac73ebd47cd404ccbf388c9e83a602a807fc1185d771fd7c28d2cafa
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              data_2
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
                                                                                                                                              • Size 8KB
                                                                                                                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                              Submit Download

                                                                                                                                              data_3
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
                                                                                                                                              • Size 8KB
                                                                                                                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                              Submit Download

                                                                                                                                              136.0.6008.22.manifest
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\136.0.6008.22.manifest
                                                                                                                                              • Size 225B
                                                                                                                                              • SHA256 f7cf7f8bc1e2a84858fc169d027458c9fa565afdc94ac9f58891f39667e05960
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              150x150Logo.scale-100.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-100.png
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              150x150Logo.scale-100_contrast-white.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              150x150Logo.scale-140.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-140.png
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              150x150Logo.scale-140_contrast-white.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              150x150Logo.scale-180.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-180.png
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              150x150Logo.scale-180_contrast-white.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              150x150Logo.scale-80.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-80.png
                                                                                                                                              • Size 827B
                                                                                                                                              • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              150x150Logo.scale-80_contrast-white.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                                                                              • Size 799B
                                                                                                                                              • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              70x70Logo.scale-100.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-100.png
                                                                                                                                              • Size 781B
                                                                                                                                              • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              70x70Logo.scale-100_contrast-white.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                                                                              • Size 752B
                                                                                                                                              • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              70x70Logo.scale-140.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-140.png
                                                                                                                                              • Size 991B
                                                                                                                                              • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              70x70Logo.scale-140_contrast-white.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-140_contrast-white.png
                                                                                                                                              • Size 865B
                                                                                                                                              • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              70x70Logo.scale-180.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-180.png
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              70x70Logo.scale-180_contrast-white.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-180_contrast-white.png
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              70x70Logo.scale-80.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-80.png
                                                                                                                                              • Size 590B
                                                                                                                                              • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              70x70Logo.scale-80_contrast-white.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\Assets\70x70Logo.scale-80_contrast-white.png
                                                                                                                                              • Size 519B
                                                                                                                                              • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              assistant_package
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\assistant_package
                                                                                                                                              • Size 3.6MB
                                                                                                                                              • SHA256 ac451192b285e40a67ab2e34f97ff86d65ee7a1f3ce1c86f048ca1c990e11331
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              d3dcompiler_47.dll
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\d3dcompiler_47.dll
                                                                                                                                              • Size 4.5MB
                                                                                                                                              • SHA256 a89eedc60219e5f2d35f94573945c0a3c045cfc48270624d06ef9dae7c359257
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              dxcompiler.dll
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\dxcompiler.dll
                                                                                                                                              • Size 24.6MB
                                                                                                                                              • SHA256 7a553cb8cf74a12b673dd7dd9acc21bee22cbaed39b8a53fbab059f48edf1e4e
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              dxil.dll
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\dxil.dll
                                                                                                                                              • Size 1.5MB
                                                                                                                                              • SHA256 c7083c71cacaa9bcf0a1b686f56186cdfe41fdb1be39ab50e1c48d579870a67d
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              files_list
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\files_list
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 153ba8d7191054c8eb8b180a8f5b5b1c8dc47d0c642331beb8919a67e922e3e9
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              headless_command_resources.pak
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\headless_command_resources.pak
                                                                                                                                              • Size 2KB
                                                                                                                                              • SHA256 90e398ef08a0178d1efd373addb5070a551011be8b9d27fcc2f234e430a8ad98
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              icudtl.dat
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\icudtl.dat
                                                                                                                                              • Size 10.4MB
                                                                                                                                              • SHA256 f11071c692e85689891070cb6f68120dc1a49941325325f7e5b017af42483e72
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              installer.exe
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer.exe
                                                                                                                                              • Size 8.0MB
                                                                                                                                              • SHA256 3a7cd7023d780aee3c44e7502e0446807abf3f3558e1074f001e7dada324ec7a
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              installer_helper_64.exe
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\installer_helper_64.exe
                                                                                                                                              • Size 601KB
                                                                                                                                              • SHA256 29dd2e3874384d8f1cd61ef6dcba97e2ddd4a426e8a203f683126add0b557b31
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              libEGL.dll
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\libEGL.dll
                                                                                                                                              • Size 460KB
                                                                                                                                              • SHA256 6f2448fa8553806457b2842fcd9045b68255b201ab901bcfdb9f0d3e9801443d
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              libGLESv2.dll
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\libGLESv2.dll
                                                                                                                                              • Size 460KB
                                                                                                                                              • SHA256 d972d13ddca8f0a7c8c39a1f79ce092232caca9ec74e56afaffa4cbdc7254399
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              bg.pak
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\localization\bg.pak
                                                                                                                                              • Size 1021KB
                                                                                                                                              • SHA256 7958eea00f4ef14a9b3a9021b87ae4cdace36ca171d6487e09427c980925066a
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              bn.pak
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\localization\bn.pak
                                                                                                                                              • Size 1.3MB
                                                                                                                                              • SHA256 6307636ac68ea9742dba9dcafd1a6cba2c086be46c25fc10c9392a083f67a763
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ca.pak
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\localization\ca.pak
                                                                                                                                              • Size 642KB
                                                                                                                                              • SHA256 0cb115bf30541172098fb7a542713d2a86607e1c9f6c36e459015f0b2cc2876c
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              cs.pak
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\localization\cs.pak
                                                                                                                                              • Size 641KB
                                                                                                                                              • SHA256 b8a82ad00c2a033704cf0a9b6a20d4c48f61cab7d6fafd60d5ed7120946d0a64
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              da.pak
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\localization\da.pak
                                                                                                                                              • Size 590KB
                                                                                                                                              • SHA256 1d767d2231eeaf346ee7d5eafceaef5884df41666cafa057ec9784da278a75c1
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              de.pak
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\localization\de.pak
                                                                                                                                              • Size 639KB
                                                                                                                                              • SHA256 e54dd081dd855ea575145a5071fd9db219715dcd4735e24167230c1655609937
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              el.pak
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\localization\el.pak
                                                                                                                                              • Size 1.1MB
                                                                                                                                              • SHA256 fa8f4b42f21b74e386c88f66aa6802076e78da4e442fd74d875cbccd6af00419
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              en-GB.pak
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\localization\en-GB.pak
                                                                                                                                              • Size 518KB
                                                                                                                                              • SHA256 6f735948c21e15f796292e92dda0f4820982774f9b3adfd31a6a3c11284783fc
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              en-US.pak
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.22\localization\en-US.pak
                                                                                                                                              • Size 521KB
                                                                                                                                              • SHA256 43d287ec974b976f98ebc934b980e24628da839fea1fe53f61977420367a7501
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              installer_prefs.json
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 57c1c202f499e47fb74fa27ac1cef58a2a9a74d63a38c29f70d8a282a12725b2
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Opera Browser.lnk
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\Opera Browser.lnk
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 45bddc78e0b58f09ebbfedabe6a0ece11ff3c944a736d9c59a19c834af3e31f2
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              additional_file0.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\additional_file0.tmp
                                                                                                                                              • Size 2.9MB
                                                                                                                                              • SHA256 3f73fcad3e4341457014e2d3b6f2d8897626292ab63bcfbed20cc9156bc5059f
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              assistant_installer.exe
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\assistant\assistant_installer.exe
                                                                                                                                              • Size 2.4MB
                                                                                                                                              • SHA256 7759a3f4d694115a391420ae1ca24edeafe6f02ee4fc2dee9937d8a4b804a608
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              dbgcore.DLL
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\assistant\dbgcore.DLL
                                                                                                                                              • Size 196KB
                                                                                                                                              • SHA256 e7e395f28ceb05ed3519970190ec4f72a7489609acd1401fb6b41582cc1dcc3e
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              dbghelp.dll
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\assistant\dbghelp.dll
                                                                                                                                              • Size 1.8MB
                                                                                                                                              • SHA256 27dde9b1136e5c13cc16b7cfa8945a9a9f7508ad91f124961eabed06b2886c4b
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              installer_prefs_include.json
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\installer_prefs_include.json
                                                                                                                                              • Size 224B
                                                                                                                                              • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              installer_prefs_include.json
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\installer_prefs_include.json
                                                                                                                                              • Size 239B
                                                                                                                                              • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              installer_prefs_include.json2e57f7cb-f29d-44f0-af80-8c8fde898dd4.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\3fc8f358-6611-4982-8bdb-81ba1e4c7893 Opera Installer Temp\opera_package_202609222318181\installer_prefs_include.json2e57f7cb-f29d-44f0-af80-8c8fde898dd4.tmp
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 45392f069afc5b2dbd56bd5fd565de0d29b0e0c1be9b7b27fd8a60d1866b9c0e
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              installer.exe
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\7zS078B36E9\installer.exe
                                                                                                                                              • Size 8.0MB
                                                                                                                                              • SHA256 7c9c1c49c414174606f75b1a24d4c5b0b1db84fa522d06e827d9d32e3d2e0e93
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              OpInst.exe
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                                                                                                              • Size 2.8MB
                                                                                                                                              • SHA256 b45a417df25beb8085fc0a35d18d94de9aee036016f8e99b773c9c2d12cc5dec
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              bg.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                                                                                                              • Size 224KB
                                                                                                                                              • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              messages.json
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2756_1376941150\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                              • Size 401B
                                                                                                                                              • SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              messages.json
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2756_1376941150\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                              • Size 387B
                                                                                                                                              • SHA256 554cbb0514a7897ebe50043e0de9fabfcf321dcbd3c39e77cb96e62d871c7bc3
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              messages.json
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2756_1376941150\CRX_INSTALL\_locales\es\messages.json
                                                                                                                                              • Size 424B
                                                                                                                                              • SHA256 b04b308252b490b9555e5e002c5c6da63f3a6d517e2f659a626a500467e21100
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              preview.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2756_1376941150\CRX_INSTALL\wallpaper\preview.png
                                                                                                                                              • Size 464KB
                                                                                                                                              • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              favicon_opera_one.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6108_856598768\CRX_INSTALL\favicon_opera_one.png
                                                                                                                                              • Size 2KB
                                                                                                                                              • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Icon_Light_Neutral.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6760_1406691427\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                                                                              • Size 2KB
                                                                                                                                              • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              settings.dat
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                                                                              • Size 40B
                                                                                                                                              • SHA256 d71bf8152f837bad983a3ea48294b973edfbc93c47a807fbf1ebcd5cf8c9fa99
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              1a4d32fe-1113-420d-a571-d9c22e20c7fd.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\1a4d32fe-1113-420d-a571-d9c22e20c7fd.tmp
                                                                                                                                              • Size 203B
                                                                                                                                              • SHA256 f985aa030ded18deae439d93c5346c5bf7c55c0b99480760b61862f55e6848eb
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              34ba0682-0e07-47de-a9fe-f286bc8c5a92.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\34ba0682-0e07-47de-a9fe-f286bc8c5a92.tmp
                                                                                                                                              • Size 456B
                                                                                                                                              • SHA256 4aae78fbbb29fb8168eb5d04447f4e3ad5560eeb17de41ac779bf922a9114570
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              4e21d280-f845-45b3-946f-e5db3252bb4d.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\4e21d280-f845-45b3-946f-e5db3252bb4d.tmp
                                                                                                                                              • Size 203B
                                                                                                                                              • SHA256 0764463de60c9982ca736d54a8c85275110fff2d86d338cd98dd2ac31b8a4ac1
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              5e72b58a-d6c9-4cce-ab8e-3a50ebdfbcc3.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\5e72b58a-d6c9-4cce-ab8e-3a50ebdfbcc3.tmp
                                                                                                                                              • Size 171B
                                                                                                                                              • SHA256 2ba82e75ff1d31f0c4f28cc841523128cd77a602acba5e5b99365771ce855074
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              BookmarkMergedSurfaceOrderingcb8ccf2b-349e-41ef-b0c1-660d78940126.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrderingcb8ccf2b-349e-41ef-b0c1-660d78940126.tmp
                                                                                                                                              • Size 6B
                                                                                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              Bookmarks
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                                                                                              • Size 36KB
                                                                                                                                              • SHA256 76e5a65deced20f5035094810ca726acfc9a4344f4ed53c877153c951123e319
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              BookmarksExtras
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                                                                                              • Size 167KB
                                                                                                                                              • SHA256 636992a49f7addc1c3165231685ab77cf5b60f7176fc45d33b8da4f310d72aef
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              BookmarksExtras44f0f207-6cbc-409a-9a53-0a8c92117350.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras44f0f207-6cbc-409a-9a53-0a8c92117350.tmp
                                                                                                                                              • Size 2B
                                                                                                                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                              • Size 48B
                                                                                                                                              • SHA256 7e6bb3b476580c90a4b85e24b192ffb13f9cb049319fbebfbb9d7dccd05f5ede
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                              • Size 336B
                                                                                                                                              • SHA256 9b50040b1ae9a3dfa8ee110fd5d6e36681fc85fbe23f3d9f4082e1732d40d9a2
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                              • Size 336B
                                                                                                                                              • SHA256 28d3853b01ff27f95214341d96b0660df1baf460f4ff9e194db850dc31562bc0
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              MANIFEST-000001
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                                                                                                                              • Size 41B
                                                                                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              main.js
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
                                                                                                                                              • Size 47KB
                                                                                                                                              • SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              logo_128.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_128.png
                                                                                                                                              • Size 7KB
                                                                                                                                              • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              logo_16.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_16.png
                                                                                                                                              • Size 653B
                                                                                                                                              • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              logo_32.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_32.png
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              logo_48.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_48.png
                                                                                                                                              • Size 2KB
                                                                                                                                              • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              logo_64.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\icons\logo_64.png
                                                                                                                                              • Size 2KB
                                                                                                                                              • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              service-worker-loader.js
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.7_0\service-worker-loader.js
                                                                                                                                              • Size 49B
                                                                                                                                              • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              favicon_opera_one.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\favicon_opera_one.png
                                                                                                                                              • Size 2KB
                                                                                                                                              • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              reader_mode.js
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\reader_mode.js
                                                                                                                                              • Size 112KB
                                                                                                                                              • SHA256 17f8a5c1d70acee668cc6964317d88802d4409c32b0d7e292b95e1de8ddb16df
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              spotify_frame_interceptor.js
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\spotify_frame_interceptor.js
                                                                                                                                              • Size 5KB
                                                                                                                                              • SHA256 895ef6ae0efde6f5e8af23d1acbfac4a5351bda31c89d2e64c05f2de0181dd56
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              background.js
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
                                                                                                                                              • Size 87KB
                                                                                                                                              • SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Icon_Light_Neutral.png
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
                                                                                                                                              • Size 2KB
                                                                                                                                              • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              popup.js.LICENSE.txt
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\popup.js.LICENSE.txt
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              rules.json
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\rules.json
                                                                                                                                              • Size 839B
                                                                                                                                              • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              3a07165d-86e0-4178-8c6c-c58d39fbb1c5.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\3a07165d-86e0-4178-8c6c-c58d39fbb1c5.tmp
                                                                                                                                              • Size 27KB
                                                                                                                                              • SHA256 3a9c655a88437e331f50a23bb40cb1a3de86277cb1a9488c81c426598cfab0a3
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              44c5994e-46e6-46c2-95ff-3f4273549325.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\44c5994e-46e6-46c2-95ff-3f4273549325.tmp
                                                                                                                                              • Size 27KB
                                                                                                                                              • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              44cc8d73-22cf-4018-b38c-c1201019319a.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\44cc8d73-22cf-4018-b38c-c1201019319a.tmp
                                                                                                                                              • Size 27KB
                                                                                                                                              • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              96eab14d-4a7a-4416-af96-71474e5eed2c.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\96eab14d-4a7a-4416-af96-71474e5eed2c.tmp
                                                                                                                                              • Size 27KB
                                                                                                                                              • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              b5b0aeaa-1b71-4873-8535-0d8f46bef988.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\b5b0aeaa-1b71-4873-8535-0d8f46bef988.tmp
                                                                                                                                              • Size 27KB
                                                                                                                                              • SHA256 7aca076b4b1dccb2457284a51bddb5c43eacf93224ec1f9aedcdefb1fbc9b087
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              baa87bdd-40c4-4349-8130-3eb54479dcae.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\baa87bdd-40c4-4349-8130-3eb54479dcae.tmp
                                                                                                                                              • Size 27KB
                                                                                                                                              • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Network Persistent State
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                                                                              • Size 61B
                                                                                                                                              • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Network Persistent Statef0e71d2b-fb36-4fd3-873b-eca498d670ad.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent Statef0e71d2b-fb36-4fd3-873b-eca498d670ad.tmp
                                                                                                                                              • Size 111B
                                                                                                                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              SCT Auditing Pending Reports9054a6ff-0345-430a-b466-2de557bf5491.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reports9054a6ff-0345-430a-b466-2de557bf5491.tmp
                                                                                                                                              • Size 2B
                                                                                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                              • Size 11KB
                                                                                                                                              • SHA256 6fb003293f18b3a3ab5a7c2bb50783a77e6990f1a8ea5569be36e54ede824e94
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                              • Size 15KB
                                                                                                                                              • SHA256 fc0f8415498e2ee0e41060d0958beb0aa559bfafc440821bb06ac115c3bdecfd
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                              • Size 15KB
                                                                                                                                              • SHA256 902cc77f829e5f54ac23702e7f14b7f7a5f4c464f7cc7c187db67d97944b8163
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Preferences11d07ec0-d6ee-455a-be06-58857885ac5d.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences11d07ec0-d6ee-455a-be06-58857885ac5d.tmp
                                                                                                                                              • Size 10KB
                                                                                                                                              • SHA256 9c1f04752acc5cfb4c19afa7b68ffc545642b4b9f2ab6916daa7e05a751da42e
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Secure Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                              • Size 112KB
                                                                                                                                              • SHA256 02d75b61ae7ee1c52d79e13dbcfb8c998a36a43faf8f41868e615e6a0f8bc889
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Secure Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                              • Size 85KB
                                                                                                                                              • SHA256 f44d0d7481de379e476e02ee3f5c890af60f74946cddc55f829ddf3f2122093f
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Secure Preferences
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                              • Size 85KB
                                                                                                                                              • SHA256 28a43a65a2656a5261999381bf3a7fd5cfb7d1de01ffaace242469eb76812b44
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              a9229ca7-b509-449c-8d2e-7635d4e1e8b9.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\a9229ca7-b509-449c-8d2e-7635d4e1e8b9.tmp
                                                                                                                                              • Size 72B
                                                                                                                                              • SHA256 4b687f220df3fe830d183f60a795e8ae7937c966c3e16fd44229fbf1ec7e3702
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                              • Size 216B
                                                                                                                                              • SHA256 4f16e6c7b13739f65c15b8659752745c1cbe3d739af6f2ec1f51da745e337039
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              the-real-index
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                              • Size 120B
                                                                                                                                              • SHA256 b3cbdcf58a0ec28f27f0a9c6451b8b6b1d61babfdbdce69db9788cf250e79410
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              1353ab28-f4e0-4024-ace0-b92165b8cb55.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\1353ab28-f4e0-4024-ace0-b92165b8cb55.tmp
                                                                                                                                              • Size 381B
                                                                                                                                              • SHA256 d48e3762f7446ab63e2016dc26ea83a2fe71dbc50bdaa41b5541fd61ab60d198
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              950ef038-42f2-4ffe-8d9c-bf3f23583bdd.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\950ef038-42f2-4ffe-8d9c-bf3f23583bdd.tmp
                                                                                                                                              • Size 381B
                                                                                                                                              • SHA256 59903c2d09435b6be85be0a19b303ec41993da98c3dfcd2a8940ac417fd84444
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              e6a4ece8-d9cd-41eb-af51-94f786a58fd0.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\e6a4ece8-d9cd-41eb-af51-94f786a58fd0.tmp
                                                                                                                                              • Size 381B
                                                                                                                                              • SHA256 ac1f9c607797a2ec8a7daecadc172162341435d13b6e69a599622be080102e1e
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 75054e5852987d4846f5d39d967de935d54ed41de4735dc454379492d47ff12f
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 4a5ecf5ed6653e6fbc70503f88f7e5df6e8d8d24e57395917c2a5cd23c152456
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Size 493B
                                                                                                                                              • SHA256 610190b30a98a89332fc39efdac1b2e4bbd194bb47aa55023ff6f28feec76903
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Size 765B
                                                                                                                                              • SHA256 b76c1e0b7e98939c3a76c5883405a265120304960a24218e876e56b87d6f15af
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 fb2b6bf3a8f15cf07472e0d8296435661fca4021b6ea3196d30157a5b4fe376a
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 7719f88dda7e3cecc4bde8127517d4dc343b99c9498a34104a163bd2bfd5a9ab
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Size 605B
                                                                                                                                              • SHA256 6a0dfd1a4eac8489593dd0802e6a5cddfa0899b4a810953ffc7002ddd7e11f2b
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Size 941B
                                                                                                                                              • SHA256 677dc07ce0304b6770f647044855b90967303264dc63b15ce5601017a0f06842
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Size 957B
                                                                                                                                              • SHA256 d38905da0e4835c4c6fa60609807a3dd3ffe668b770c076bb7a5b289a383a69c
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Size 957B
                                                                                                                                              • SHA256 bf3d4b83f4215efcb54e4f35a6de4bbd17b96d8fc4bb16c8e95a816759a6ed7c
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2e2f1779-704d-4abd-9df7-f40aaaa9d55b.raw
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 f1680d7d62b249997dd8267a600c908612508a1784dc60120752663e1faa7a86
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 11KB
                                                                                                                                              • SHA256 f46bd5fbb5d9bf4ef52a25d20d7445c687c5094f102f08debd3bc7553cd1d0ff
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 093097302326f70ee4afce4c37008db3161102dbb6e5a6c4dcc63ff2571aaa84
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 10KB
                                                                                                                                              • SHA256 722cdc948ed7dfa2081167db8dd12955a4863e5c144f0d6c30495e47a2b2dc7f
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 890139b36f5d411f92eea5aede16f151ff1d5012aa8c96200ed8b6441bd804d4
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 4c442a3df97f8d6cec5c8fcb6af4894a646c82c89c8e507cbea0d792ab01301c
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 777df5e30ca9ce76e1cc73743b79e14418b5a7c406eb2c2e63a2deebae3d4e45
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 4b7988363d41912e3d5a0aa60fdf80fbcb7b5813fb9f8959f3a3fabf1b4cae58
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 10KB
                                                                                                                                              • SHA256 55f9c7e7fd47e265d71ced0dbaabbe9c53167195c793b4d4ad7b85504612120a
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 8KB
                                                                                                                                              • SHA256 1651a7f351cafb5e999f8bbb0dfb888831e21c9b7b66f05a972cae45bd4ab298
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 00af2feaada652379029029fcfc5bef32da11e25d6f116dad8c4dfbbaa2d0f2b
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 33d587849d8c7f1a27169d7929df4a7368c47e5549931edd6bf485503150aef8
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 fbb5d00cff0459e8ec8543be71d6c57c00e7ae5ddc44158859c691b3ca027b4f
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 77ffa980a4a9c8fee571bb9d23ee46ad6c3f820048a0efe4462f0e55c4a0ab6f
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 5c43b409af6d2eea912012db1f5b154102d2cad344693fd8c108f16870d1e516
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 d277636300912c4cf5629e1103e7157c0d7627527d9aade22a240ed10b929ae5
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 1f12032e827176e791b1482e24fef433175748cb9899725d8f7e28f35e60b14c
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 aa7007edbb61eadf4bb8834f9d2d2be7984f327571edddb3a8786b74298fb5cd
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 10KB
                                                                                                                                              • SHA256 d2c94c4d7ee6b31ce077cc77ca137f9d59c3468c214ef8b8074b68642adfdf6e
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 10KB
                                                                                                                                              • SHA256 9fe95fa023cd13365fa099a48296e9d333748e5ec8ea6bec234436205aafbce7
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 11KB
                                                                                                                                              • SHA256 d325faf56ee454e1dac838c28273c1fe8b40a5761033073a1ff79b64142466b6
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 cbb178c0cc8969b3880f0c81e783c86da6902fe219bb439f4280d2c7fd92f104
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 e397ae3ecfcb5df8742d204774ca09172c12a79076fb5f258b496af0774ee00a
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 6KB
                                                                                                                                              • SHA256 2104b318e9e559a30cb15a2e36a851144146471d6b65a167d4c9dadcff6b8956
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 7KB
                                                                                                                                              • SHA256 26db43f29138c70b404fc4c6b287443d1f01cfae8757b4fa16039dcc1e443b58
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 7KB
                                                                                                                                              • SHA256 e5617338679102230c080c35ddd0d19d2a81a277dfcaee99e0b2e327ba3a4eb6
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 a9db2687ca7e12c5083f189efca6717fdd18a993d8179c02cb2c63754056d2a2
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 10KB
                                                                                                                                              • SHA256 07d781ecec99efedb5d584730b35d14d82974e8d293d8bab2ca6ef250df42f38
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 b4d1fb601d9f93d6248a23b6fa158b045e337f4e295547370355864277ce5036
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 effa9abbd4d526a8a96f8aa935386721bff778cfe43facbd2975ecb719e66d68
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 ee8fa4e562c5281b20a0809df0c2ead0a7569f7b7258b6c186bcbde9e5312584
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 1d6a336928830435a3fe4165892ad03d7d9d59a847b88c0ca061434700eacb8b
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 10KB
                                                                                                                                              • SHA256 3c92835e7659ade3c2b6aceaf15e9130fd0cb46bb5af4968cba6119269808ef7
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 493B
                                                                                                                                              • SHA256 ecbb353f2d4e005ec952a39527f2d5a3f872d4d6fdca1f235e8d39852e00736b
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 11KB
                                                                                                                                              • SHA256 378dd72a3c65d1726eb7f4295ba622ed4f285c7e7ae1b94f2eab94734502ae9d
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 973B
                                                                                                                                              • SHA256 46dea391b28f449cfcb9af0686913055a41683f89735e358a82f572c2ceb01c2
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 7KB
                                                                                                                                              • SHA256 c452ece659518d21bd30807e98db0c1d0e79907e5ebdef18183e1f70098ccce4
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 8KB
                                                                                                                                              • SHA256 a678938ea87a2f783e2fb2c3e91ab30c59185537256235af7a0814f6996530a5
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 c9460f32e1154380d30f53d1d4b06570ec51a921bade09968dda80cdb6855548
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 e34d701116a1dfefa8f3239096752dfa915d8699b1e1cd722f8d6479acc2720a
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 94fad85e1bf97236d54d8653304097ed89facc2ed66e202e15f32ddb07e13a2b
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 11KB
                                                                                                                                              • SHA256 69da37250b20cf4cf635a6c38f59b7a2d9dc22a7613d88168b9c69f1cb8420f9
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 11KB
                                                                                                                                              • SHA256 4d7b7c8067cab88d15b6a5fc055fe5b6d70f08fd112e027d7f2af19774866eba
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 749B
                                                                                                                                              • SHA256 e4db19e20dd65cb5217d7bc801ce78ca19bb3cd5de36b470c209e3d7c5cf38f7
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 7011c623758b0258dfe58063ca222b14afd3ca128880a17462fcde7b28f948b5
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 073775cca1439baa8e5e3b119c0359baedea5d6000d184d2d47de6b681bd604a
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 7KB
                                                                                                                                              • SHA256 bffdaf20b509edd78387cc8fb4334fa8e006a32f00cf68472aaf18e2fb9ec759
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 621B
                                                                                                                                              • SHA256 1783046e60459ca6f6bc30a8e99fdd1f6b7b15fd540c25cb2fb3f761f82cf88a
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 8KB
                                                                                                                                              • SHA256 2a38b01cda7815f10ae7eff0f32c880c906d2b8df3f5a61d0e959c9b95163092
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 4e1b8551fa66d630349faab2b95395b87b6dd45642b095385cff9060e342d5ba
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 4bcef0c0bcb5595cd1608ff922271450f741036ebd411f715e715a68b8408a67
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 7KB
                                                                                                                                              • SHA256 6762c7d2e82bb120dc56784e436ee82e8e2313fa84d236576266ad61eb2f83d6
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 8KB
                                                                                                                                              • SHA256 9341239769330478006305237cb04d916ecd95255895bdcaf0df794f6d497dea
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 09e001463d9e5723193ae4f4456cbdb1390194257effeb400333fd7c5c27c750
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 11KB
                                                                                                                                              • SHA256 71bb602bc4d7a8c6f6e53905d07df53d7f41d7a86c616df837723d2a0d880138
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 925B
                                                                                                                                              • SHA256 fefd38a8796a809354b6f6455f6b81a6868e397c7cd5b314f8d0b19f1bfe19c6
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 84ceec0c5962e99d6df236133c6bff2d8a64d7dd321e659e9f08e9a1689473de
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 8KB
                                                                                                                                              • SHA256 c3277fda67f51a1fae8baf11c02de6d8396d7092b58de8f8bf6046cc4ff8d50f
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 10KB
                                                                                                                                              • SHA256 f221ae46e3767ec7ca7ad7c2e5007996f016808d4cee6a274318384772f9a3f6
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw
                                                                                                                                              • Size 10KB
                                                                                                                                              • SHA256 8eba522134d4b33b022c3ede1725bfbb60e168aa73dda604f5179b87d69c7faf
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw545255f9-043f-4ca3-af73-8e643c1fd16b.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw545255f9-043f-4ca3-af73-8e643c1fd16b.tmp
                                                                                                                                              • Size 10KB
                                                                                                                                              • SHA256 982f1192379630f73e7af09946fa97b948f1fe271454a63932bd7b30a524e32f
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw55b7a7a5-5400-4922-bc09-0c8b212cd4ba.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_3cbcb20f-6440-4c87-8636-a0c2e8b98a48.raw55b7a7a5-5400-4922-bc09-0c8b212cd4ba.tmp
                                                                                                                                              • Size 9KB
                                                                                                                                              • SHA256 e7b2d72fac9159822424e5e2f0f0c68d1208642ecc19e1066c9e0c91abc583a0
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_7be7aee5-61ea-4c2b-a0ef-ff5868b7f813.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7be7aee5-61ea-4c2b-a0ef-ff5868b7f813.raw
                                                                                                                                              • Size 621B
                                                                                                                                              • SHA256 60140fc124f05b8de6b1f4e1c4faa2ac9d31278b587a2aaa46a641321a7f183b
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_7be7aee5-61ea-4c2b-a0ef-ff5868b7f813.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7be7aee5-61ea-4c2b-a0ef-ff5868b7f813.raw
                                                                                                                                              • Size 797B
                                                                                                                                              • SHA256 11200ed502f42b4b870e1767136788904466f2c3e3f956e221b6edf9617f8e37
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_7be7aee5-61ea-4c2b-a0ef-ff5868b7f813.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7be7aee5-61ea-4c2b-a0ef-ff5868b7f813.raw
                                                                                                                                              • Size 493B
                                                                                                                                              • SHA256 ec0afde35fa28b2dc3d79fcacbed278bbae4688c7d8718c1bfd46a14fe71cf81
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_7be7aee5-61ea-4c2b-a0ef-ff5868b7f813.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7be7aee5-61ea-4c2b-a0ef-ff5868b7f813.raw
                                                                                                                                              • Size 637B
                                                                                                                                              • SHA256 7d0ae3730c4e0e537bdc1be55c439c4e5dd8a7373d3848470f1fdd896aec8eb4
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_7be7aee5-61ea-4c2b-a0ef-ff5868b7f813.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7be7aee5-61ea-4c2b-a0ef-ff5868b7f813.raw
                                                                                                                                              • Size 637B
                                                                                                                                              • SHA256 5598c8b0e0caba0e6968e1c71634113d78491490af16cc69b769658f4fcba25b
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_7be7aee5-61ea-4c2b-a0ef-ff5868b7f813.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7be7aee5-61ea-4c2b-a0ef-ff5868b7f813.raw
                                                                                                                                              • Size 845B
                                                                                                                                              • SHA256 6a713608c94460c7b202bf4775bef92fca398ed9e3a697c90f92cd61416f8d43
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              session_7be7aee5-61ea-4c2b-a0ef-ff5868b7f813.raw
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7be7aee5-61ea-4c2b-a0ef-ff5868b7f813.raw
                                                                                                                                              • Size 637B
                                                                                                                                              • SHA256 bbf029131f08b7ef75f51b8db9912690bfc703a39bc1c7290faa81aa29e028bb
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              CURRENT
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
                                                                                                                                              • Size 16B
                                                                                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp2756.0.1210519346
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2756.0.1210519346
                                                                                                                                              • Size 265B
                                                                                                                                              • SHA256 10e8328f53c0f1474582bd0cf02d62aa3b41fb3a62062ba0261416632fe2d4b8
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp2756.0.1210519346
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2756.0.1210519346
                                                                                                                                              • Size 2KB
                                                                                                                                              • SHA256 4814a8c4b4c655dc0dbc94eeae3f34cb60ad33922af2311e8aa984f06e20587c
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp2756.0.1210519346
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp2756.0.1210519346
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 0f40acf59fc8f2ec0f19c111eb543874e4a4767296946d649576b146307d0f75
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6108.0.1926353796
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6108.0.1926353796
                                                                                                                                              • Size 265B
                                                                                                                                              • SHA256 ebbd720abf766ee5e0d2e343516d6a58c9d6117c6014879292aa7437ff23a88e
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6108.0.1926353796
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6108.0.1926353796
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 c031fbb7d4f31c6add06c2acc54e54fffb910f8b11dc4c2d23cb2d8bf2efc71f
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6108.0.1926353796
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6108.0.1926353796
                                                                                                                                              • Size 2KB
                                                                                                                                              • SHA256 12180298d984d496e501ee8132e38ff0fdfb0ccd1f2148a499c0b39a25ae4045
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 c464de31805d936403a0a2c338fdc26f81ed53a374d75130f0bc56784334410b
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 2KB
                                                                                                                                              • SHA256 d3c922aad11e2e651609601c1c48672033d36cb25eae8d1b6edfe4d26035fb22
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 3KB
                                                                                                                                              • SHA256 2c1976b1bb98e4f68bee8f81946d6c7165978e4f73843e5f4295c75d51989359
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 3KB
                                                                                                                                              • SHA256 2e7b0a9873c29c2f0e750d3bb16e6a599881bf9f0f5edbc7b6b6aa546ae6b214
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 3KB
                                                                                                                                              • SHA256 d730d2522757910e89208e21e76f6a4037352dab5a7feaf87af3bb76d03264e5
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 3KB
                                                                                                                                              • SHA256 0ef920efdf543fb22963a6856d9fdddac976b457f4116a743becb4d493e8e439
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 3KB
                                                                                                                                              • SHA256 1990796058f7c76cb93141a9874262087ae4d15e7577d48bceac62c08d646dba
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 921B
                                                                                                                                              • SHA256 797d2c3b1c166483489a09e01db6422011920c9b2d5a52bfd8943e6e429f9d5f
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 1017B
                                                                                                                                              • SHA256 f7554e9c41493f25db22aca6376cc8183a324fcd3a63dd98a889dd82037b60f3
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 bdc95d6354e89e189cd6b642fab5cf116371f1f0fe38346427fd2b2d2b4937ba
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 e23db93d927736faadb6bc65deef060d5180b9e4b04e9562af75c59e5695450a
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 3KB
                                                                                                                                              • SHA256 c405ba130c79c68adcc0e21dacebb0a358da32272adf77e7486272221545bd94
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 3KB
                                                                                                                                              • SHA256 5d7c5ae78734317a7dad9ab8f1b74ade6cbc0b9c262d16a7d79c88b8dfd89652
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 3KB
                                                                                                                                              • SHA256 8e19c234cb840c6921807ce17183b62f16cd9d8281a62c94dafee65d99f8baf9
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 549B
                                                                                                                                              • SHA256 9805317f3c4d19ed07b42c7f159b49a0be5e7d4b55c793667c7770529da1efd1
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 737B
                                                                                                                                              • SHA256 8ab603809d32bec1e7ef6d8648809838914ab418f279eca3892f07ff8f4a03b9
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 c53c501b35c488ed1fffe99f18344e9da1dd8a3eb2b767680f84ee2638f4bd84
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 727a7a9e56731664c449a96c61c49b4b5f2be576c6bd38f0970675cf28a7bfdd
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 827B
                                                                                                                                              • SHA256 a45a9a26432cda2d74e0e30da550861b4a66c1bfb0ecdccc28480246d98e00e8
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 fe88c91b9bab9812b45d8df1aa00241a6cc1c8343798e6026d1a98a6cb0bcd86
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.1196838899
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.1196838899
                                                                                                                                              • Size 1KB
                                                                                                                                              • SHA256 3c52b4f3a2d18c5cdef3521b175a42685b0c2e9833d18f3d722ad58c7a4759d3
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.0.11968388994e49f13b-2514-43d5-bc0c-847c9d2e9451.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.0.11968388994e49f13b-2514-43d5-bc0c-847c9d2e9451.tmp
                                                                                                                                              • Size 647B
                                                                                                                                              • SHA256 e0333cee8038ea667a4c06a04c034016ce29a5e119b3caa7e8767bfcd164cd04
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.1.1646361530
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.1.1646361530
                                                                                                                                              • Size 200B
                                                                                                                                              • SHA256 2827ae85eb04fc008c00f046262813226777d1b3dc9160fcf71ee5c205845cb6
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              ssdfp6760.1.1646361530
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6760.1.1646361530
                                                                                                                                              • Size 224B
                                                                                                                                              • SHA256 6b2128d869fef45b9912f03bdc6a14cb895a6c8ad4d732bcdce47bf6b49c02bf
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              suggestions_cache.jsonc42bb31a-8b2e-484c-a7ac-cd6227cb6445.tmp
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.jsonc42bb31a-8b2e-484c-a7ac-cd6227cb6445.tmp
                                                                                                                                              • Size 652KB
                                                                                                                                              • SHA256 d4df4ba4eb2034569fa19bc8daf3c407b09c04e6803c2b7cfdb3f714b34c9765
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              data_1
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                                                                                              • Size 264KB
                                                                                                                                              • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                              Submit Download

                                                                                                                                              Local State
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                              • Size 2KB
                                                                                                                                              • SHA256 f9cdc9aa946c24fdc71566bdd44f2a08ef5f1711908d46301c76edbd94d4e887
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              Local State
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                              • Size 3KB
                                                                                                                                              • SHA256 464cff094936681a36fc1915f9adfb04d2a791a9175c3d2621201c59fa8441eb
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              VariationsSeedV2
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                                                                                              • Size 19B
                                                                                                                                              • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              VariationsSeedV2
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                                                                                              • Size 11B
                                                                                                                                              • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                                                                                              • MD5 SHA1 SHA512
                                                                                                                                              Submit Download

                                                                                                                                              assistant_prefs.json
                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                                                                                                                              • Size 151B
                                                                                                                                              • SHA256 af170271bc2e16c748b3e59743b8f09d40e2e93e1b65c4cb4f11a33de38131c1
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              opera-one-dark.jpg
                                                                                                                                              • Path C:\Windows\SystemTemp\scoped_dir6760_1739269797\opera-one-dark.jpg
                                                                                                                                              • Size 349KB
                                                                                                                                              • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              persona.ini
                                                                                                                                              • Path C:\Windows\SystemTemp\scoped_dir6760_1739269797\persona.ini
                                                                                                                                              • Size 217B
                                                                                                                                              • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              opera-one.jpg
                                                                                                                                              • Path C:\Windows\SystemTemp\scoped_dir6760_1762762888\opera-one.jpg
                                                                                                                                              • Size 194KB
                                                                                                                                              • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                              Submit Download

                                                                                                                                              persona.ini
                                                                                                                                              • Path C:\Windows\SystemTemp\scoped_dir6760_1762762888\persona.ini
                                                                                                                                              • Size 207B
                                                                                                                                              • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                                                                                                              • MD5 SHA1 SHA512 TLSH
                                                                                                                                              Submit Download

                                                                                                                                              memory/1076-2250-0x00000165CE690000-0x00000165CE691000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1092-1310-0x000001E70FCD0000-0x000001E710175000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1276-2218-0x000001CD4E540000-0x000001CD4E541000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1276-1899-0x00000170CFA60000-0x00000170CFF05000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1408-412-0x00000247543A0000-0x0000024754845000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/1416-723-0x0000028C71370000-0x0000028C71815000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2284-2254-0x0000016D493D0000-0x0000016D493D1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2384-1934-0x000001EF60EB0000-0x000001EF60EB1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2452-2262-0x000001E41B0F0000-0x000001E41B0F1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2752-1253-0x0000022701020000-0x00000227014C5000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2756-1900-0x0000023D6E1C0000-0x0000023D6E665000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2796-2258-0x000001BF7EBB0000-0x000001BF7EBB1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/2964-697-0x0000024DB9660000-0x0000024DB9B05000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/3012-2248-0x000001A638FF0000-0x000001A638FF1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/3096-1926-0x0000017855D00000-0x0000017855D01000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/3244-2212-0x000001AFF11E0000-0x000001AFF11E1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/3556-2252-0x0000021492D90000-0x0000021492D91000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/3704-2203-0x000001F3BC4E0000-0x000001F3BC4E1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/3732-1924-0x000001CA8B1E0000-0x000001CA8B1E1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/3744-1938-0x000001684AE80000-0x000001684AE81000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4072-604-0x0000022D60B50000-0x0000022D60FF5000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4088-2178-0x000001807DF00000-0x000001807DF01000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4136-1309-0x000001A5FCFE0000-0x000001A5FD485000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4268-815-0x000001DEFC1E0000-0x000001DEFC3A3000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4268-574-0x000001DEFC3B0000-0x000001DEFC3B1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4308-1930-0x000001B5584F0000-0x000001B5584F1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4432-702-0x0000025D64780000-0x0000025D64C25000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4464-2370-0x0000022B8A3A0000-0x0000022B8A3A1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4652-417-0x0000024F33040000-0x0000024F334E5000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4788-1882-0x000002652E1D0000-0x000002652E393000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4788-1466-0x000002652E3A0000-0x000002652E3A1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4852-715-0x000001BE9E930000-0x000001BE9EDD5000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4908-759-0x000002C0DBB20000-0x000002C0DBFC5000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4952-1304-0x00000231A6930000-0x00000231A6AF3000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4952-544-0x00007FFF1D980000-0x00007FFF1D981000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4952-545-0x00000231A6B00000-0x00000231A6B01000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4960-1375-0x0000028366870000-0x0000028366871000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/4960-1879-0x00000283666A0000-0x0000028366863000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/5064-2256-0x0000011A44CF0000-0x0000011A44CF1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/5068-578-0x000001BE684A0000-0x000001BE68945000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/5456-2186-0x000002CDDDA10000-0x000002CDDDA11000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/5464-1013-0x000001E680A00000-0x000001E680BC3000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/5464-614-0x000001E680BD0000-0x000001E680BD1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/5592-420-0x000001D7CACC0000-0x000001D7CB165000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/5672-413-0x0000015557A80000-0x0000015557F25000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/5820-1928-0x000002A9297F0000-0x000002A9297F1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/5952-2260-0x00000287988B0000-0x00000287988B1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/6108-1313-0x0000015358230000-0x00000153586D5000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/6132-2188-0x00000262D8880000-0x00000262D8881000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/6192-1922-0x0000017B69BA0000-0x0000017B69BA1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/6316-2190-0x000001D89D150000-0x000001D89D151000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/6356-1880-0x0000018C9CB80000-0x0000018C9D025000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/6360-1902-0x000001E2730A0000-0x000001E273545000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/6368-2192-0x0000019D8EF00000-0x0000019D8EF01000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/6472-1898-0x0000029535A20000-0x0000029535BE3000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/6472-1362-0x0000029535BF0000-0x0000029535BF1000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/6500-2215-0x0000025DA7040000-0x0000025DA7041000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/6628-1932-0x0000017530410000-0x0000017530411000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/6720-2216-0x00000169AF840000-0x00000169AF841000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/6724-1881-0x0000026A8AC40000-0x0000026A8AE03000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/6724-1367-0x0000026A8AE10000-0x0000026A8AE11000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/6760-2674-0x00000235AB940000-0x00000235ABDE5000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/7072-1011-0x000001A65B380000-0x000001A65B381000-memory.dmp
                                                                                                                                              Download

                                                                                                                                              memory/7072-1252-0x000001A65B1B0000-0x000001A65B373000-memory.dmp
                                                                                                                                              Download