Overview

overview

8

Static

static

8

OperaInstaller.exe

windows10-2004-x64

8

OperaInstaller.exe

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    70s
  • max time network
    149s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/09/2026, 07:10

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample260930-hzkrbatxa1
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 43 IoCs
  • Loads dropped DLL 53 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

    defense_evasion
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 52 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 5 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 10 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 4 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 52 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 7 IoCs
  • Modifies registry class 49 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 56 IoCs
  • Suspicious use of FindShellTrayWindow 37 IoCs
  • Suspicious use of SendNotifyMessage 18 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4780
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:5860
      • C:\Users\Admin\AppData\Local\Temp\7zS4E614389\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS4E614389\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Reads the TCP/IP host and domain name from the registry
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:3212
        • C:\Users\Admin\AppData\Local\Temp\7zS4E614389\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS4E614389\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2b4,0x2b8,0x2bc,0x294,0x2c0,0x7ff774776998,0x7ff7747769a8,0x7ff7747769b8
          4⤵
          • Executes dropped EXE
          PID:2876
        • C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:2556
        • C:\Users\Admin\AppData\Local\Temp\7zS4E614389\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS4E614389\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=3212 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_20260930081049" --session-guid=e40764b1-6f9d-4525-8c6f-b912baabac22 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=2008000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:2932
          • C:\Users\Admin\AppData\Local\Temp\7zS4E614389\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS4E614389\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2ac,0x2b0,0x2c0,0x288,0x2c4,0x7ff774776998,0x7ff7747769a8,0x7ff7747769b8
            5⤵
            • Executes dropped EXE
            PID:3488
          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe" --backend --initial-pid=3212 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491" --session-guid=e40764b1-6f9d-4525-8c6f-b912baabac22 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=136.0.6008.52
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Enumerates system info in registry
            • Modifies registry class
            • Suspicious use of WriteProcessMemory
            PID:4432
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff6273b6998,0x7ff6273b69a8,0x7ff6273b69b8
              6⤵
              • Executes dropped EXE
              PID:6120
            • C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Writes a Windows system DLL name to a user directory
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:2936
              • C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xf5c9cc,0xf5c9d8,0xf5c9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:1228
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:4636
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x62c9cc,0x62c9d8,0x62c9e4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:4124
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Reads the TCP/IP host and domain name from the registry
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:1808
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:4912
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7fff92285d30,0x7fff92285d40,0x7fff92285d50
                      10⤵
                      • Executes dropped EXE
                      PID:5480
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:2468
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7fff92285d30,0x7fff92285d40,0x7fff92285d50
                      10⤵
                      • Executes dropped EXE
                      PID:920
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2a4,0x2a8,0x2ac,0x254,0x2b0,0x1077324,0x1077330,0x107733c
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:6232
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:6268
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x278,0x27c,0x280,0x244,0x284,0x7fff92285d30,0x7fff92285d40,0x7fff92285d50
                        11⤵
                        • Executes dropped EXE
                        PID:6412
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:6856
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fff92285d30,0x7fff92285d40,0x7fff92285d50
                        11⤵
                        • Executes dropped EXE
                        PID:6928
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:7392
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fff92285d30,0x7fff92285d40,0x7fff92285d50
                        11⤵
                        • Executes dropped EXE
                        PID:7544
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:4092
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fff92285d30,0x7fff92285d40,0x7fff92285d50
                7⤵
                • Executes dropped EXE
                PID:1740
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1684,i,2517234082161101426,1664157202231546269,262144 --field-trial-handle=2180,i,12875629779321814577,8299712522918057428,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,6689656709447347702,8217441179389186490,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2176 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6388
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1908,i,3852136182551411213,7117519725972993229,524288 --field-trial-handle=2180,i,12875629779321814577,8299712522918057428,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,6689656709447347702,8217441179389186490,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2292 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                • Enumerates system info in registry
                PID:6380
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2536,i,7566117792818825703,8566560799621226897,524288 --field-trial-handle=2180,i,12875629779321814577,8299712522918057428,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,6689656709447347702,8217441179389186490,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2428 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6628
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3540,i,11345278101058223280,1623956573856253778,2097152 --field-trial-handle=2180,i,12875629779321814577,8299712522918057428,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,6689656709447347702,8217441179389186490,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3788 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6964
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4208,i,2203842486583015797,6080319417959499018,524288 --field-trial-handle=2180,i,12875629779321814577,8299712522918057428,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,6689656709447347702,8217441179389186490,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4204 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:7120
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4428,i,18389655517946615291,16158147964460018289,2097152 --field-trial-handle=2180,i,12875629779321814577,8299712522918057428,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,6689656709447347702,8217441179389186490,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4476 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6200
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4456,i,15763330918831675575,15521183508741133789,524288 --field-trial-handle=2180,i,12875629779321814577,8299712522918057428,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,6689656709447347702,8217441179389186490,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3676 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:7360
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4936,i,15192089188418239621,2542864072596263329,524288 --field-trial-handle=2180,i,12875629779321814577,8299712522918057428,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,6689656709447347702,8217441179389186490,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4980 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:7784
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5152,i,2322893979473215000,9481966362158121190,2097152 --field-trial-handle=2180,i,12875629779321814577,8299712522918057428,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,6689656709447347702,8217441179389186490,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5200 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:7008
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5208,i,4885780129512270547,10070630930195777425,524288 --field-trial-handle=2180,i,12875629779321814577,8299712522918057428,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2184,i,6689656709447347702,8217441179389186490,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5320 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6292
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\additional_file2.tmp"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:7912
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7fff92285d30,0x7fff92285d40,0x7fff92285d50
                7⤵
                • Executes dropped EXE
                PID:7220
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1684,i,3691882390660544683,9486812881146292239,262144 --field-trial-handle=2104,i,12642726792762785595,17845586320302141275,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2064,i,13640563332963355094,11998298944149419657,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2100 /prefetch:2
                7⤵
                  PID:8140
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1940,i,7304935562868681521,1967138177768951455,524288 --field-trial-handle=2104,i,12642726792762785595,17845586320302141275,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2064,i,13640563332963355094,11998298944149419657,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2144 /prefetch:11
                  7⤵
                  • System Time Discovery
                  PID:8136
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2492,i,13079450914579741259,6338751514404950961,524288 --field-trial-handle=2104,i,12642726792762785595,17845586320302141275,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2064,i,13640563332963355094,11998298944149419657,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2704 /prefetch:13
                  7⤵
                    PID:6508
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3880,i,9265158499784478052,4976851260510304696,2097152 --field-trial-handle=2104,i,12642726792762785595,17845586320302141275,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2064,i,13640563332963355094,11998298944149419657,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3264 /prefetch:9
                    7⤵
                      PID:7676
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4008,i,12744006359343926253,17280983241142208964,524288 --field-trial-handle=2104,i,12642726792762785595,17845586320302141275,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2064,i,13640563332963355094,11998298944149419657,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4080 /prefetch:14
                      7⤵
                        PID:6656
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3968,i,12948662493983276935,14622918042332917221,2097152 --field-trial-handle=2104,i,12642726792762785595,17845586320302141275,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2064,i,13640563332963355094,11998298944149419657,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4060 /prefetch:9
                        7⤵
                          PID:6624
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4492,i,15052085263804238374,3754617991592902801,2097152 --field-trial-handle=2104,i,12642726792762785595,17845586320302141275,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2064,i,13640563332963355094,11998298944149419657,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4540 /prefetch:9
                          7⤵
                            PID:6260
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4128,i,14948881424869640086,1848066792974937739,524288 --field-trial-handle=2104,i,12642726792762785595,17845586320302141275,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2064,i,13640563332963355094,11998298944149419657,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3888 /prefetch:14
                            7⤵
                              PID:7444
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4992,i,7521666812476608319,4720258994758945120,524288 --field-trial-handle=2104,i,12642726792762785595,17845586320302141275,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2064,i,13640563332963355094,11998298944149419657,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5008 /prefetch:12
                              7⤵
                                PID:7668
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5308,i,2775712304119724797,1984106577970541824,524288 --field-trial-handle=2104,i,12642726792762785595,17845586320302141275,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2064,i,13640563332963355094,11998298944149419657,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3900 /prefetch:14
                                7⤵
                                  PID:8180
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                                6⤵
                                  PID:6952
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fff92285d30,0x7fff92285d40,0x7fff92285d50
                                    7⤵
                                      PID:7956
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1692,i,2665120044337491041,3168061948301131297,262144 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2084 /prefetch:2
                                      7⤵
                                        PID:5488
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1952,i,2381149303433434913,7369859374466731388,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2152 /prefetch:11
                                        7⤵
                                        • System Time Discovery
                                        PID:7536
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2540,i,8000414286881255430,13742318914053067624,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2424 /prefetch:13
                                        7⤵
                                          PID:4576
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3076,i,1569145524142191504,8349331353667830597,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3240 /prefetch:14
                                          7⤵
                                            PID:6592
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3176,i,2261282426911932384,8788601604998591247,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3260 /prefetch:14
                                            7⤵
                                              PID:6568
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3192,i,10845488577417796829,677425569431280078,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3280 /prefetch:14
                                              7⤵
                                                PID:6636
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3216,i,17681527383817070000,11285917173976868894,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3348 /prefetch:14
                                                7⤵
                                                  PID:7592
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3228,i,16340999482038409063,17506755293404367214,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3368 /prefetch:14
                                                  7⤵
                                                    PID:6564
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3332,i,8708284406184005254,16105105268020269556,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3312 /prefetch:14
                                                    7⤵
                                                      PID:6948
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3440,i,1954880077928485659,3016129179345624426,2097152 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3492 /prefetch:1
                                                      7⤵
                                                        PID:7208
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3204,i,4372115846229940708,14416871843616684205,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3300 /prefetch:14
                                                        7⤵
                                                          PID:6572
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_gx_splash.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                                                          7⤵
                                                            PID:7364
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4804,i,11241390953932448323,16879489335136685332,2097152 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4832 /prefetch:9
                                                            7⤵
                                                              PID:6648
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4880,i,2667757503863410075,9164324922704805253,2097152 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5000 /prefetch:1
                                                              7⤵
                                                                PID:8108
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5192,i,16718497387550894432,18162840732819411191,2097152 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5200 /prefetch:1
                                                                7⤵
                                                                  PID:6428
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5340,i,4793977653362270698,15720241293153676699,2097152 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5404 /prefetch:1
                                                                  7⤵
                                                                    PID:2732
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6160,i,17800369597102593610,1906269694667002851,2097152 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6176 /prefetch:9
                                                                    7⤵
                                                                      PID:6552
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6844,i,6317522428285831753,10808210533358525679,2097152 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6948 /prefetch:9
                                                                      7⤵
                                                                        PID:7152
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6984,i,4445822495204841209,7167275792063557147,2097152 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=7044 /prefetch:9
                                                                        7⤵
                                                                          PID:6356
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6788,i,3338012774301477319,16000052591287632544,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6524 /prefetch:12
                                                                          7⤵
                                                                            PID:7156
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7316,i,8925196924601771159,13271183387404886895,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7428 /prefetch:14
                                                                            7⤵
                                                                              PID:6036
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6968,i,8595152573315530506,12680811557727184329,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7448 /prefetch:14
                                                                              7⤵
                                                                                PID:7372
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7420,i,4263265511862961048,10230495594994379919,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7468 /prefetch:14
                                                                                7⤵
                                                                                  PID:420
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6504,i,10438709954309631642,17276115916513417162,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7648 /prefetch:14
                                                                                  7⤵
                                                                                    PID:2280
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6528,i,7379876833904243453,3409378944370855094,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=5512 /prefetch:14
                                                                                    7⤵
                                                                                      PID:7984
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7768,i,5262253497398924221,3936823233589184601,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7892 /prefetch:14
                                                                                      7⤵
                                                                                        PID:1076
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8016,i,8826999056131575274,4881904095116509593,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8012 /prefetch:14
                                                                                        7⤵
                                                                                          PID:5772
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8096,i,3233444225339803129,14608450843451764334,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8116 /prefetch:14
                                                                                          7⤵
                                                                                            PID:7260
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8080,i,14487414558918011086,6465761466771235680,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8040 /prefetch:14
                                                                                            7⤵
                                                                                              PID:7000
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8028,i,5552877976267150959,605000219735161023,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8064 /prefetch:14
                                                                                              7⤵
                                                                                                PID:7684
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8596,i,2030131344210349848,16950218815132480486,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8648 /prefetch:14
                                                                                                7⤵
                                                                                                  PID:5736
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8572,i,6389404827463681530,11909554401814270750,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8608 /prefetch:14
                                                                                                  7⤵
                                                                                                    PID:5444
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8588,i,13146254433797551342,14461227125964787700,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8628 /prefetch:14
                                                                                                    7⤵
                                                                                                      PID:5044
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8668,i,12704904009840403915,981349235822221579,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8680 /prefetch:14
                                                                                                      7⤵
                                                                                                        PID:5492
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=9592,i,1954492139842136814,1559408735346151940,2097152 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9612 /prefetch:9
                                                                                                        7⤵
                                                                                                          PID:8640
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                                                                                          7⤵
                                                                                                            PID:8732
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2a8,0x2ac,0x2b0,0x27c,0x2b4,0x7ff6ebb15598,0x7ff6ebb155a8,0x7ff6ebb155b8
                                                                                                              8⤵
                                                                                                                PID:9596
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9828,i,12103400438072266812,2312088347368221079,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9936 /prefetch:14
                                                                                                              7⤵
                                                                                                                PID:8744
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9692,i,9936556110535056437,15357178771215173168,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9916 /prefetch:14
                                                                                                                7⤵
                                                                                                                  PID:8756
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9824,i,6185941271129959112,8667751845531580401,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9960 /prefetch:14
                                                                                                                  7⤵
                                                                                                                    PID:8764
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10180,i,1319977151873297418,18115951941650426286,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10296 /prefetch:14
                                                                                                                    7⤵
                                                                                                                      PID:8784
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=10308,i,12567692721005552150,11836695716007034093,2097152 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10488 /prefetch:1
                                                                                                                      7⤵
                                                                                                                        PID:8796
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10632,i,12967111107236799628,14161344427790422047,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10640 /prefetch:14
                                                                                                                        7⤵
                                                                                                                          PID:8808
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10796,i,14526617298695359790,991128925739240096,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10788 /prefetch:14
                                                                                                                          7⤵
                                                                                                                            PID:8824
                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9660,i,17455674537751191060,13430818778106945166,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=9668 /prefetch:14
                                                                                                                            7⤵
                                                                                                                              PID:8396
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9648,i,18421973049500188726,10236957220445659698,524288 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11056 /prefetch:14
                                                                                                                              7⤵
                                                                                                                                PID:8672
                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:side-panel-full-api=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=11216,i,5435787498332291478,5794140128335178087,2097152 --field-trial-handle=2092,i,9404401540342560265,14562933719838859115,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2116,i,13609724079893023450,11894323798041759116,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10332 /prefetch:1
                                                                                                                                7⤵
                                                                                                                                  PID:9608
                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"
                                                                                                                            4⤵
                                                                                                                            • Executes dropped EXE
                                                                                                                            • Writes a Windows system DLL name to a user directory
                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                            PID:4688
                                                                                                                          • C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\assistant\assistant_installer.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\assistant\assistant_installer.exe" --version
                                                                                                                            4⤵
                                                                                                                            • Executes dropped EXE
                                                                                                                            • Loads dropped DLL
                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                            • Enumerates system info in registry
                                                                                                                            • Suspicious use of WriteProcessMemory
                                                                                                                            PID:5992
                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\assistant\assistant_installer.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x18c,0x258,0xf5c9cc,0xf5c9d8,0xf5c9e4
                                                                                                                              5⤵
                                                                                                                              • Executes dropped EXE
                                                                                                                              • Loads dropped DLL
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              PID:3280
                                                                                                                    • C:\Program Files (x86)\Windows Media Player\wmplayer.exe
                                                                                                                      "C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /Play -Embedding
                                                                                                                      1⤵
                                                                                                                      • Enumerates connected drives
                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                      • Modifies registry class
                                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                                      • Suspicious use of FindShellTrayWindow
                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                      PID:4600
                                                                                                                      • C:\Windows\SysWOW64\unregmp2.exe
                                                                                                                        "C:\Windows\System32\unregmp2.exe" /AsyncFirstLogon
                                                                                                                        2⤵
                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                        • Suspicious use of WriteProcessMemory
                                                                                                                        PID:1452
                                                                                                                        • C:\Windows\system32\unregmp2.exe
                                                                                                                          "C:\Windows\SysNative\unregmp2.exe" /AsyncFirstLogon /REENTRANT
                                                                                                                          3⤵
                                                                                                                          • Enumerates connected drives
                                                                                                                          • Suspicious use of AdjustPrivilegeToken
                                                                                                                          PID:4776
                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                      C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p -s upnphost
                                                                                                                      1⤵
                                                                                                                      • Drops file in Windows directory
                                                                                                                      PID:6084
                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                                                                      1⤵
                                                                                                                      • Enumerates system info in registry
                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                                                                      • Suspicious use of FindShellTrayWindow
                                                                                                                      • Suspicious use of SendNotifyMessage
                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                      PID:2312
                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7fffb7b3c728,0x7fffb7b3c734,0x7fffb7b3c740
                                                                                                                        2⤵
                                                                                                                          PID:5932
                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1684,i,9148450635297951146,10900573951230647999,262144 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:2
                                                                                                                          2⤵
                                                                                                                            PID:4156
                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1480,i,11747248370901407269,10793394796557163031,524288 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=2108 /prefetch:11
                                                                                                                            2⤵
                                                                                                                            • System Time Discovery
                                                                                                                            PID:2848
                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2340,i,14183483452751911124,4315193645938921334,524288 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:13
                                                                                                                            2⤵
                                                                                                                              PID:5496
                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3208,i,10304616426119123947,3027735126714859134,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=3216 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:2420
                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3184,i,6244795615644801244,15942453618831174212,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:4596
                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4640,i,13439830226437891075,16087828229675718469,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:1
                                                                                                                                  2⤵
                                                                                                                                    PID:5136
                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4772,i,12407039717513963338,11044038417576273748,524288 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:14
                                                                                                                                    2⤵
                                                                                                                                      PID:2332
                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5536,i,8062493507903742546,3409038593642230362,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:1860
                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4636,i,11442849248093589360,11632247037458967421,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:7036
                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6068,i,12776982873882810422,18315694241541333013,524288 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
                                                                                                                                          2⤵
                                                                                                                                            PID:7356
                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=6196,i,15957355814253115835,17694563695998857912,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:6920
                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6236,i,1139887722904746194,13991817374171227650,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:4720
                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6540,i,2085970473611809415,12353167552738574291,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:6468
                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6548,i,2398280967393157035,12101632491761887670,524288 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:14
                                                                                                                                                  2⤵
                                                                                                                                                    PID:6696
                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6544,i,13974317660542071476,2644882558736227361,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:1
                                                                                                                                                    2⤵
                                                                                                                                                      PID:9880
                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6444,i,7165464890037602384,16928145324990808517,524288 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=5484 /prefetch:14
                                                                                                                                                      2⤵
                                                                                                                                                        PID:9888
                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6476,i,2636960703894560955,10424524239834381521,524288 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=256 /prefetch:14
                                                                                                                                                        2⤵
                                                                                                                                                          PID:9940
                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6456,i,16799020056632423003,10658190804798878617,524288 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:14
                                                                                                                                                          2⤵
                                                                                                                                                            PID:9956
                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6252,i,11622364258755411289,104053276012146918,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=3212 /prefetch:1
                                                                                                                                                            2⤵
                                                                                                                                                              PID:9968
                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=3688,i,6503764130022624789,1659272335839707508,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=3408 /prefetch:1
                                                                                                                                                              2⤵
                                                                                                                                                                PID:8844
                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5516,i,11772661413553446527,6105148846502384988,524288 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:14
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:8204
                                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5412,i,10236372886325378950,7642905602003289787,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=6252 /prefetch:1
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:8208
                                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5540,i,6613791373092066913,8188692619200803727,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:1
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:8976
                                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6068,i,11350454445208511860,18021727582210091763,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=3232 /prefetch:1
                                                                                                                                                                      2⤵
                                                                                                                                                                        PID:8484
                                                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6456,i,15686195697540170932,4930784563847482850,524288 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:14
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:7508
                                                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6064,i,2346228848298900540,6775380128670493220,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:1
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:9312
                                                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=5592,i,17308522713852359176,4332091220307648191,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:9
                                                                                                                                                                            2⤵
                                                                                                                                                                              PID:1384
                                                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6372,i,11654014780541332603,15430219067115701784,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
                                                                                                                                                                              2⤵
                                                                                                                                                                                PID:8452
                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=5360,i,7337321816030133591,12474547319534207824,2097152 --field-trial-handle=2040,i,12061682854417062112,9821623779581995226,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:1
                                                                                                                                                                                2⤵
                                                                                                                                                                                  PID:7016
                                                                                                                                                                              • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                                                                "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                                                                1⤵
                                                                                                                                                                                  PID:4100
                                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                                                                                                                                                  1⤵
                                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                                  • Loads dropped DLL
                                                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                                                  • Suspicious use of WriteProcessMemory
                                                                                                                                                                                  PID:7672
                                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe
                                                                                                                                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7fff92285d30,0x7fff92285d40,0x7fff92285d50
                                                                                                                                                                                    2⤵
                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                    PID:7756
                                                                                                                                                                                • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                                                                                  C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                                                                                  1⤵
                                                                                                                                                                                    PID:8024
                                                                                                                                                                                  • C:\Windows\system32\svchost.exe
                                                                                                                                                                                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                                                    1⤵
                                                                                                                                                                                      PID:7828
                                                                                                                                                                                    • C:\Windows\system32\svchost.exe
                                                                                                                                                                                      C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                                                                                                                                                      1⤵
                                                                                                                                                                                      • Modifies data under HKEY_USERS
                                                                                                                                                                                      PID:7744
                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                                                                                                                                      1⤵
                                                                                                                                                                                        PID:8440
                                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff6ebb15598,0x7ff6ebb155a8,0x7ff6ebb155b8
                                                                                                                                                                                          2⤵
                                                                                                                                                                                            PID:9716
                                                                                                                                                                                        • C:\Windows\System32\rundll32.exe
                                                                                                                                                                                          C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                                                                                          1⤵
                                                                                                                                                                                            PID:6936

                                                                                                                                                                                          Network

                                                                                                                                                                                                MITRE ATT&CK Enterprise v16

                                                                                                                                                                                                Reconnaissance

                                                                                                                                                                                                Resource Development

                                                                                                                                                                                                Initial Access

                                                                                                                                                                                                Execution

                                                                                                                                                                                                Persistence

                                                                                                                                                                                                Boot or Logon Autostart Execution

                                                                                                                                                                                                1
                                                                                                                                                                                                T1547

                                                                                                                                                                                                Registry Run Keys / Startup Folder

                                                                                                                                                                                                1
                                                                                                                                                                                                T1547.001

                                                                                                                                                                                                Event Triggered Execution

                                                                                                                                                                                                1
                                                                                                                                                                                                T1546

                                                                                                                                                                                                Component Object Model Hijacking

                                                                                                                                                                                                1
                                                                                                                                                                                                T1546.015

                                                                                                                                                                                                Hijack Execution Flow

                                                                                                                                                                                                1
                                                                                                                                                                                                T1574

                                                                                                                                                                                                DLL Search Order Hijacking

                                                                                                                                                                                                1
                                                                                                                                                                                                T1574.001

                                                                                                                                                                                                Privilege Escalation

                                                                                                                                                                                                Boot or Logon Autostart Execution

                                                                                                                                                                                                1
                                                                                                                                                                                                T1547

                                                                                                                                                                                                Registry Run Keys / Startup Folder

                                                                                                                                                                                                1
                                                                                                                                                                                                T1547.001

                                                                                                                                                                                                Event Triggered Execution

                                                                                                                                                                                                1
                                                                                                                                                                                                T1546

                                                                                                                                                                                                Component Object Model Hijacking

                                                                                                                                                                                                1
                                                                                                                                                                                                T1546.015

                                                                                                                                                                                                Hijack Execution Flow

                                                                                                                                                                                                1
                                                                                                                                                                                                T1574

                                                                                                                                                                                                DLL Search Order Hijacking

                                                                                                                                                                                                1
                                                                                                                                                                                                T1574.001

                                                                                                                                                                                                Defense Evasion

                                                                                                                                                                                                Hijack Execution Flow

                                                                                                                                                                                                1
                                                                                                                                                                                                T1574

                                                                                                                                                                                                DLL Search Order Hijacking

                                                                                                                                                                                                1
                                                                                                                                                                                                T1574.001

                                                                                                                                                                                                Masquerading

                                                                                                                                                                                                1
                                                                                                                                                                                                T1036

                                                                                                                                                                                                Match Legitimate Name or Location

                                                                                                                                                                                                1
                                                                                                                                                                                                T1036.005

                                                                                                                                                                                                Modify Registry

                                                                                                                                                                                                2
                                                                                                                                                                                                T1112

                                                                                                                                                                                                Credential Access

                                                                                                                                                                                                Credentials from Password Stores

                                                                                                                                                                                                1
                                                                                                                                                                                                T1555

                                                                                                                                                                                                Credentials from Web Browsers

                                                                                                                                                                                                1
                                                                                                                                                                                                T1555.003

                                                                                                                                                                                                Unsecured Credentials

                                                                                                                                                                                                1
                                                                                                                                                                                                T1552

                                                                                                                                                                                                Credentials In Files

                                                                                                                                                                                                1
                                                                                                                                                                                                T1552.001

                                                                                                                                                                                                Discovery

                                                                                                                                                                                                Browser Information Discovery

                                                                                                                                                                                                1
                                                                                                                                                                                                T1217

                                                                                                                                                                                                Peripheral Device Discovery

                                                                                                                                                                                                1
                                                                                                                                                                                                T1120

                                                                                                                                                                                                Query Registry

                                                                                                                                                                                                5
                                                                                                                                                                                                T1012

                                                                                                                                                                                                System Information Discovery

                                                                                                                                                                                                4
                                                                                                                                                                                                T1082

                                                                                                                                                                                                System Location Discovery

                                                                                                                                                                                                1
                                                                                                                                                                                                T1614

                                                                                                                                                                                                System Language Discovery

                                                                                                                                                                                                1
                                                                                                                                                                                                T1614.001

                                                                                                                                                                                                System Network Configuration Discovery

                                                                                                                                                                                                1
                                                                                                                                                                                                T1016

                                                                                                                                                                                                System Time Discovery

                                                                                                                                                                                                1
                                                                                                                                                                                                T1124

                                                                                                                                                                                                Lateral Movement

                                                                                                                                                                                                Collection

                                                                                                                                                                                                Data from Local System

                                                                                                                                                                                                1
                                                                                                                                                                                                T1005

                                                                                                                                                                                                Command and Control

                                                                                                                                                                                                Exfiltration

                                                                                                                                                                                                Impact

                                                                                                                                                                                                Replay Monitor

                                                                                                                                                                                                Loading Replay Monitor...

                                                                                                                                                                                                Downloads

                                                                                                                                                                                                E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                                                                • Size 471B
                                                                                                                                                                                                • SHA256 f4c81da45da3889780c4e61596bdbc7544a9306861551a6634dae51963e36fd2
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                                                                • Size 416B
                                                                                                                                                                                                • SHA256 cce83636522740fed16a3a377046814c4d82ea64813e3ef55b760ea89abe2b9b
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                                                                • Size 6B
                                                                                                                                                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 b0b0a4fdf4b03f165ebdcaa4fcccb33d8914f7875cbd7395a86c68597ea0dc30
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                messages.json
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
                                                                                                                                                                                                • Size 593B
                                                                                                                                                                                                • SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                craw_background.js
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
                                                                                                                                                                                                • Size 531KB
                                                                                                                                                                                                • SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                                • SHA256 1100eeb7d4757c5533882fd08943b8cd3f233a891d667d798fbd3955d02f04cf
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                SCT Auditing Pending Reports
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                                • Size 2B
                                                                                                                                                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                TransportSecurity
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                                                                                • Size 523B
                                                                                                                                                                                                • SHA256 4653dce3ae0ebf541f9039ca3f8af7eb5ebb768a93c36d2ad480de4135e65e65
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Preferences
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                • SHA256 aa0304fc7d88a22edb57157db62fc1b3113ca1d5b90367114fd988890f16fb55
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Preferences
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                                • SHA256 1c24cde8f357db941f991a14959a0e4dbaef862ad91a9a6cc6dc89e1db0d514e
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Preferences
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                • SHA256 bf1daa0c0188264feeae4527ab4dbf42ec2d2e2a965bb30e1ed6464751deb978
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Secure Preferences
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                • SHA256 95d3e6b2b63673e810ab81d7ca99cd054f373c275a78052f180a4e19e975f055
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                                                                                                • Size 96B
                                                                                                                                                                                                • SHA256 af6dfa96f3fa986715fdf13cb0b7f25c7a69549faa8786e3eed8ef0e988e584a
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                index
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index
                                                                                                                                                                                                • Size 24B
                                                                                                                                                                                                • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                • SHA256 5b03db4c69041a27742cf27379262ec4b33f6a18db0c820fe8f9caaf7b6f5134
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                the-real-index~RFe5b16ff.TMP
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index~RFe5b16ff.TMP
                                                                                                                                                                                                • Size 48B
                                                                                                                                                                                                • SHA256 ad3f22e3492e5d11f8ed2fc8c105583fdc4c865529faa17d2bac5ca54e8a406b
                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Local State
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                • Size 139KB
                                                                                                                                                                                                • SHA256 5bd1acd6e470f2d3717ee442e776a8efe2ffd1eb59dc376839d6ac754fbd8c90
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Local State
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                • SHA256 420dc1e3be287d5647a6c21b740519509cb038ffd781fccb6e2adb1a6c1a06a1
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Local State
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                                • SHA256 a0621d9be5cbc32e5c352fb5e2820d5f9587dba1a215414c1fc4852d2584824f
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Local State
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                                                                                • Size 139KB
                                                                                                                                                                                                • SHA256 a40a018a2bb8fa6bf44bfcc7654d94af7ecd52024457af77874a58dd8a4df2e0
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                CurrentDatabase_400.wmdb
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb
                                                                                                                                                                                                • Size 1024KB
                                                                                                                                                                                                • SHA256 331e61a111778556f4f71925fbc2d7d288bd1362e4f4e759c52ecd0bda1d82bd
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                CurrentDatabase_400.wmdb
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb
                                                                                                                                                                                                • Size 384KB
                                                                                                                                                                                                • SHA256 3fc7d5abf880606a3f2e61d6a3802b4e4d34cac2fead9c4c6d4a8915de5fceeb
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                WMSDKNS.XML.bak
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML.bak
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                136.0.6008.52.manifest
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\136.0.6008.52.manifest
                                                                                                                                                                                                • Size 225B
                                                                                                                                                                                                • SHA256 e4932cf87759845a5f1bdd3199ae94d5896f4ce58f8b6b9fa24942f90a7fa7f9
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                150x150Logo.scale-100.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-100.png
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                150x150Logo.scale-100_contrast-white.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                150x150Logo.scale-140.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-140.png
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                150x150Logo.scale-140_contrast-white.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                150x150Logo.scale-180.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-180.png
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                150x150Logo.scale-180_contrast-white.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                150x150Logo.scale-80.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-80.png
                                                                                                                                                                                                • Size 827B
                                                                                                                                                                                                • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                150x150Logo.scale-80_contrast-white.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                                                                                                                                • Size 799B
                                                                                                                                                                                                • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                70x70Logo.scale-100.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-100.png
                                                                                                                                                                                                • Size 781B
                                                                                                                                                                                                • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                70x70Logo.scale-100_contrast-white.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                                                                                                                                • Size 752B
                                                                                                                                                                                                • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                70x70Logo.scale-140.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-140.png
                                                                                                                                                                                                • Size 991B
                                                                                                                                                                                                • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                70x70Logo.scale-140_contrast-white.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-140_contrast-white.png
                                                                                                                                                                                                • Size 865B
                                                                                                                                                                                                • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                70x70Logo.scale-180.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-180.png
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                70x70Logo.scale-180_contrast-white.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-180_contrast-white.png
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                70x70Logo.scale-80.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-80.png
                                                                                                                                                                                                • Size 590B
                                                                                                                                                                                                • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                70x70Logo.scale-80_contrast-white.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\Assets\70x70Logo.scale-80_contrast-white.png
                                                                                                                                                                                                • Size 519B
                                                                                                                                                                                                • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                assistant_package
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\assistant_package
                                                                                                                                                                                                • Size 3.6MB
                                                                                                                                                                                                • SHA256 fbbc603017d6361fbf735e11ba816cceadad30328bb2ede9ecee73f2b56bd59c
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                d3dcompiler_47.dll
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\d3dcompiler_47.dll
                                                                                                                                                                                                • Size 4.5MB
                                                                                                                                                                                                • SHA256 4b87ecdd1bfd4b8143452d107d9ea7a917f7e03c1f517b9b95cbae5ca3999069
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                dxcompiler.dll
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\dxcompiler.dll
                                                                                                                                                                                                • Size 24.6MB
                                                                                                                                                                                                • SHA256 b38658d0c434edc2d13247956a6aafd1438851f959ad61b5f9e0c1bba6bd2d9f
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                dxil.dll
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\dxil.dll
                                                                                                                                                                                                • Size 1.5MB
                                                                                                                                                                                                • SHA256 cdb874862b72cfcdb6dbdca698b462e1546c7fc9b215151c73c8f4681ad6c799
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                files_list
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\files_list
                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                • SHA256 0c087ff2c9b81050f0e8940371993a46a90267bdd94af7b5152787245dcb2742
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                headless_command_resources.pak
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\headless_command_resources.pak
                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                • SHA256 90e398ef08a0178d1efd373addb5070a551011be8b9d27fcc2f234e430a8ad98
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                icudtl.dat
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\icudtl.dat
                                                                                                                                                                                                • Size 10.4MB
                                                                                                                                                                                                • SHA256 f11071c692e85689891070cb6f68120dc1a49941325325f7e5b017af42483e72
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                installer.exe
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer.exe
                                                                                                                                                                                                • Size 8.3MB
                                                                                                                                                                                                • SHA256 07615e6bf94841a360802ceb411b81e8329dd21b57c2045335b99c36c007f5d8
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                installer_helper_64.exe
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\installer_helper_64.exe
                                                                                                                                                                                                • Size 601KB
                                                                                                                                                                                                • SHA256 3ab73bfb35ec3d7c20511f2c2e9ca60ef7514f15641209705fa9b8058de4c190
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                libEGL.dll
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\libEGL.dll
                                                                                                                                                                                                • Size 460KB
                                                                                                                                                                                                • SHA256 628f6a6eb054218f3357381d42ebf63e008316e564e1695ebd2925b7c6d050eb
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                libGLESv2.dll
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\libGLESv2.dll
                                                                                                                                                                                                • Size 460KB
                                                                                                                                                                                                • SHA256 6ea449f57a607ce9d6186bca8a16514c52ee112d94e3af2e69beb904b54593cd
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                bg.pak
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\bg.pak
                                                                                                                                                                                                • Size 1021KB
                                                                                                                                                                                                • SHA256 7958eea00f4ef14a9b3a9021b87ae4cdace36ca171d6487e09427c980925066a
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                bn.pak
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\bn.pak
                                                                                                                                                                                                • Size 1.3MB
                                                                                                                                                                                                • SHA256 6307636ac68ea9742dba9dcafd1a6cba2c086be46c25fc10c9392a083f67a763
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ca.pak
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\ca.pak
                                                                                                                                                                                                • Size 642KB
                                                                                                                                                                                                • SHA256 0cb115bf30541172098fb7a542713d2a86607e1c9f6c36e459015f0b2cc2876c
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                cs.pak
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.52\localization\cs.pak
                                                                                                                                                                                                • Size 641KB
                                                                                                                                                                                                • SHA256 b8a82ad00c2a033704cf0a9b6a20d4c48f61cab7d6fafd60d5ed7120946d0a64
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Opera Browser.lnk
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\Opera Browser.lnk
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 bea6a3045360e6522c1c7d5227db72716eb2378d9be9181be99a7d737dc3c9d2
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                additional_file0.tmp
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\additional_file0.tmp
                                                                                                                                                                                                • Size 2.9MB
                                                                                                                                                                                                • SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                assistant_installer.exe
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\assistant\assistant_installer.exe
                                                                                                                                                                                                • Size 2.4MB
                                                                                                                                                                                                • SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                dbgcore.dll
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\assistant\dbgcore.dll
                                                                                                                                                                                                • Size 196KB
                                                                                                                                                                                                • SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                dbghelp.dll
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\assistant\dbghelp.dll
                                                                                                                                                                                                • Size 1.8MB
                                                                                                                                                                                                • SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                installer_prefs_include.json
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\installer_prefs_include.json
                                                                                                                                                                                                • Size 264B
                                                                                                                                                                                                • SHA256 44c54307dfec9d9f2bc9a8d53b99979e5e2d6542792b92344d1e3a6de2fb0cbf
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                installer_prefs_include.json
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\installer_prefs_include.json
                                                                                                                                                                                                • Size 279B
                                                                                                                                                                                                • SHA256 4ec2140ade86f38f637a2f869c41136e99f872a9f9bc07fb17e339508440e97e
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                installer_prefs_include.json
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\2876ac08-c5c9-4838-9b83-cb211128531a Opera Installer Temp\opera_package_202609300810491\installer_prefs_include.json
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 8bdaa420a1d0651b5a6eebb5077e77fa94bbeaec2d8b0689982ef29533984c2d
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                installer.exe
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\7zS4E614389\installer.exe
                                                                                                                                                                                                • Size 8.3MB
                                                                                                                                                                                                • SHA256 a98e228f9d31c84cec88654b9fbf48e8bbec816fd1ab935572f448fd997c2c31
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                OpInst.exe
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                                                                                                                                                                • Size 3.1MB
                                                                                                                                                                                                • SHA256 47aa8990ce421cb3d07fbe8dba78cfe36fc4e3c6753d0451621c5f77855a5621
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                bg.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                                                                                                                                                                • Size 224KB
                                                                                                                                                                                                • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                messages.json
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2312_2101873218\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                                                                • Size 450B
                                                                                                                                                                                                • SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                favicon_opera_one.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4092_217448152\CRX_INSTALL\favicon_opera_one.png
                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                messages.json
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7912_897104859\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                                                                • Size 401B
                                                                                                                                                                                                • SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                messages.json
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7912_897104859\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                                                                • Size 387B
                                                                                                                                                                                                • SHA256 554cbb0514a7897ebe50043e0de9fabfcf321dcbd3c39e77cb96e62d871c7bc3
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                messages.json
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7912_897104859\CRX_INSTALL\_locales\es\messages.json
                                                                                                                                                                                                • Size 424B
                                                                                                                                                                                                • SHA256 b04b308252b490b9555e5e002c5c6da63f3a6d517e2f659a626a500467e21100
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                preview.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7912_897104859\CRX_INSTALL\wallpaper\preview.png
                                                                                                                                                                                                • Size 464KB
                                                                                                                                                                                                • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                wmsetup.log
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\wmsetup.log
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 9c73841f82347ba397ddf6ceca283efd9a3ae5f2df6033a81f1d5da9b7b8fd73
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                settings.dat
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                                                                                                                                • Size 40B
                                                                                                                                                                                                • SHA256 316746025287478f820a14e7694cc09d47436748efaa276e61c0d6f62e514ae5
                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                516a024c-c200-4db9-9595-79fbf5b32505.tmp
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\516a024c-c200-4db9-9595-79fbf5b32505.tmp
                                                                                                                                                                                                • Size 171B
                                                                                                                                                                                                • SHA256 151d6cb7a89738c34e4ceea8c24bd1f10dc06482390140c0ea4efdd80bac9561
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                6fc90f18-3c5c-42d7-bc8c-510df8d813fc.tmp
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\6fc90f18-3c5c-42d7-bc8c-510df8d813fc.tmp
                                                                                                                                                                                                • Size 203B
                                                                                                                                                                                                • SHA256 c0eee60e967668c4d3cbbe4f8732e6fdeee69d5cc675dea096c68c276f7b75f4
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                7e422f73-9743-4840-b9a9-517b890f56bc.tmp
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\7e422f73-9743-4840-b9a9-517b890f56bc.tmp
                                                                                                                                                                                                • Size 371B
                                                                                                                                                                                                • SHA256 0334fcb96e3b3ac54051ac915dbff82a5d2759ebcd14ea6c6d89785f5ed225c6
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Bookmarks
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                                                                                                                                                • Size 34KB
                                                                                                                                                                                                • SHA256 579cd1156dae693e071484bdf7f35d19a2ec0e2a98d07e3539202a6c57e39269
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                BookmarksExtras
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                                                                                                                                                • Size 197KB
                                                                                                                                                                                                • SHA256 9ae3beea5705490203556c42ebb2568fec6fc435b3315cd33956e872a898344b
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                BookmarksExtras654a7ddd-808b-4042-8b93-83f917e13d9d.tmp
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras654a7ddd-808b-4042-8b93-83f917e13d9d.tmp
                                                                                                                                                                                                • Size 2B
                                                                                                                                                                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                116813b4-6934-47b1-8898-2f78d611a9c3.tmp
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\116813b4-6934-47b1-8898-2f78d611a9c3.tmp
                                                                                                                                                                                                • Size 48B
                                                                                                                                                                                                • SHA256 09e2a72109a47437f849e8011abed38176d893f02b25abf893a852e6df998583
                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                • Size 336B
                                                                                                                                                                                                • SHA256 4df3110be09cb21e4701e121ce2f5c2b5c8a00c978425487580f0deaa0f46510
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                • Size 360B
                                                                                                                                                                                                • SHA256 ae131f6d944cc6035ac1d1c4911df2ff8b281ab4ad089e5074a9d6fd63785a1d
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                                • Size 672B
                                                                                                                                                                                                • SHA256 4f874475e4091e60dda667be3c34417aa3dea3e73898c2191db03df8912dbb85
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                data_0
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_0
                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                CURRENT
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\CURRENT
                                                                                                                                                                                                • Size 16B
                                                                                                                                                                                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                MANIFEST-000001
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Scripts\MANIFEST-000001
                                                                                                                                                                                                • Size 41B
                                                                                                                                                                                                • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                favicon_opera_one.png
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\favicon_opera_one.png
                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                reader_mode.js
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\reader_mode.js
                                                                                                                                                                                                • Size 112KB
                                                                                                                                                                                                • SHA256 17f8a5c1d70acee668cc6964317d88802d4409c32b0d7e292b95e1de8ddb16df
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                spotify_frame_interceptor.js
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\spotify_frame_interceptor.js
                                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                                • SHA256 895ef6ae0efde6f5e8af23d1acbfac4a5351bda31c89d2e64c05f2de0181dd56
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Network Persistent State
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                                                                                                                                • Size 719B
                                                                                                                                                                                                • SHA256 3635f8948ffc3d8defb4629b84ba182ad60c6d696b25061856af2b78d06370de
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Network Persistent State4d914c33-461d-41da-9f5b-24f6c642b456.tmp
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State4d914c33-461d-41da-9f5b-24f6c642b456.tmp
                                                                                                                                                                                                • Size 61B
                                                                                                                                                                                                • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                TransportSecurity
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\TransportSecurity
                                                                                                                                                                                                • Size 1023B
                                                                                                                                                                                                • SHA256 4c5dbeaa525d86c23a7ab8060d68d691be36385665daf47dd47dd8ebe02f9741
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Preferences
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                • SHA256 adb2f739cd23a07c741474b01242cdf73bb34a8baf52eec169d72f866ac7b564
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Preferences
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                                • SHA256 3892f66e1ed830907e2f4dd91f0ef2c3237adbe10336f305edfc330980149e0d
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Preferences
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                                • SHA256 e425211184047aa4078ddc2343249f94fe7d0cb24b0b6b6ab57c363813f45a20
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Preferences
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                                • SHA256 ce5341386332a4a9202223d2276ad16c58709bb76ea4eeb000c25d0d1a429134
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Secure Preferences
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                                                • Size 85KB
                                                                                                                                                                                                • SHA256 5be8e5adf37ab0cbf9bea68a524632a217b741fc190fc521093c76c732a58cab
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Secure Preferences
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                                                • Size 85KB
                                                                                                                                                                                                • SHA256 7f9546c2c5ce1742efa179fbc61a48e6862e67688c1230327f459ee0c423687f
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Secure Preferences
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                                                • Size 86KB
                                                                                                                                                                                                • SHA256 391852672a37e4469624e014d9c5d43a22a21a73165368625bb14639cd05f419
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                19b04813-2c72-4a6d-a9b7-0c78ca537ad4.tmp
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\19b04813-2c72-4a6d-a9b7-0c78ca537ad4.tmp
                                                                                                                                                                                                • Size 72B
                                                                                                                                                                                                • SHA256 188492fc5c0c07879d7a9b49e7eed2054e073b5ee44b7bfa3d4821459c8061a6
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                • Size 216B
                                                                                                                                                                                                • SHA256 a8c49c9a05efa0b7b3c71ba2a8bcfe92db9528616ba718d0f665e19220a431fb
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                • Size 96B
                                                                                                                                                                                                • SHA256 720294e7a80aa17c02e1f904019f80dfd4a32f9ea24e8ecb24b1b3013fc3b9ae
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                the-real-index
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                                • Size 216B
                                                                                                                                                                                                • SHA256 6937aa81eba55003bddb5b9c0b129627fe7f2a179961b9f5f9a00ddfdc6f36ac
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ae6d1c35-dc14-4826-b494-6b61833f2745.tmp
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\ae6d1c35-dc14-4826-b494-6b61833f2745.tmp
                                                                                                                                                                                                • Size 381B
                                                                                                                                                                                                • SHA256 52f9b14c66cc56109223986c48d670d2c71f2dc917b682ce15bb0ae5ea913445
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                af84e0f2-0385-4f55-9ca3-825f02cce2a0.tmp
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\af84e0f2-0385-4f55-9ca3-825f02cce2a0.tmp
                                                                                                                                                                                                • Size 381B
                                                                                                                                                                                                • SHA256 640bd893c4f85a919c53063350b9c67efa49287c57562b4f8dd359c301a54aa5
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                b1d5bdd2-343a-47bc-ba2c-7a9fae7a5fab.tmp
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\b1d5bdd2-343a-47bc-ba2c-7a9fae7a5fab.tmp
                                                                                                                                                                                                • Size 381B
                                                                                                                                                                                                • SHA256 7069d36481ec4a9555247d3e5c520212697f31686c37aa8f00bdf7739174427e
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Size 493B
                                                                                                                                                                                                • SHA256 2dd1e0f9bf64627ea46266a5d95c69a1914dc2db5d072917a4177a1f7133f9a4
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Size 621B
                                                                                                                                                                                                • SHA256 f2ddf9a064eb896f8b04051afbdb1d81ef76fd192c480012879edbb02f9292da
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Size 957B
                                                                                                                                                                                                • SHA256 2f2d42097490fe839aa34c431d00f9a96edc0e7cd9494cdbe9e865f772d50582
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 a853f5509f0f665d6347c5826a157c13031f7dce36f91436c3874c2fe5172eae
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 0b529bf751e0db26ddb5073fe978ced5fdb5730e3e17738f3271bab8844d51fb
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Size 781B
                                                                                                                                                                                                • SHA256 341d04c6e60e7a069c293d57fc46728a15e75a12113cf431e6268b83a0c04d16
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Size 941B
                                                                                                                                                                                                • SHA256 4542b38d8287ea8aca1ac78f69cd2aa50030037a52afa6eebbf794fee41c9b60
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Size 973B
                                                                                                                                                                                                • SHA256 6e54f22ee27e080251ac82c31cf99e6890b4c1ad7921ab3648305a92d0dbec9f
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 979c8e8cb124ad1636d4ddda7015923fda89247deefa04a0799cb2f1e9153ee7
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 e115a75a718c8cb8556f0e0a4833f5f30a24e6f3a75662ce5df26513b777b657
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_84178971-3fcf-4712-90e2-f3e934ab2081.raw
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 628106918e32ef8776fed4ecd95f972bb86e074ab22972cc8af887e29583a723
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_8af90d17-d13e-4fa4-93c7-96ced04e8977.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8af90d17-d13e-4fa4-93c7-96ced04e8977.raw
                                                                                                                                                                                                • Size 493B
                                                                                                                                                                                                • SHA256 53af6dc71a8a56da958529e371ac1c422cdb0886a750ac79b4e5eac289baae8a
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_8af90d17-d13e-4fa4-93c7-96ced04e8977.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8af90d17-d13e-4fa4-93c7-96ced04e8977.raw
                                                                                                                                                                                                • Size 621B
                                                                                                                                                                                                • SHA256 bab28b7dac91edf730eb66b225bcda6f9b84fa24e2c08c9399d5e810e4d902de
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_8af90d17-d13e-4fa4-93c7-96ced04e8977.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8af90d17-d13e-4fa4-93c7-96ced04e8977.raw
                                                                                                                                                                                                • Size 637B
                                                                                                                                                                                                • SHA256 a8c54987a86233c4a4acff0771dc56fa7376878a3d5621cc335fa91ab67f3712
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_8af90d17-d13e-4fa4-93c7-96ced04e8977.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8af90d17-d13e-4fa4-93c7-96ced04e8977.raw
                                                                                                                                                                                                • Size 637B
                                                                                                                                                                                                • SHA256 3f1e6fb9a40cdb8e4402bc540eb1af3a075eba1e2a416fd1a67fc5d5e2729344
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_8af90d17-d13e-4fa4-93c7-96ced04e8977.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8af90d17-d13e-4fa4-93c7-96ced04e8977.raw
                                                                                                                                                                                                • Size 813B
                                                                                                                                                                                                • SHA256 ee96a8974a6669176b90a3914829e5d3c1927bb0a471926d4eb3111cc478f8cd
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_8af90d17-d13e-4fa4-93c7-96ced04e8977.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8af90d17-d13e-4fa4-93c7-96ced04e8977.raw
                                                                                                                                                                                                • Size 845B
                                                                                                                                                                                                • SHA256 1fda9972c9413c2bd61f7eacd9257e1e8b85c2595d5eeec632b03a367fe19457
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_8af90d17-d13e-4fa4-93c7-96ced04e8977.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8af90d17-d13e-4fa4-93c7-96ced04e8977.raw
                                                                                                                                                                                                • Size 653B
                                                                                                                                                                                                • SHA256 508d29deea64745241fa6bac946449d50fc86318d4265b915458b6ae6ced59de
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 849f42eb96d9b62974a3fc52cf24cefe374167dfa0c0c31c5661a43c58b30519
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                • SHA256 eee1303788172148b6b12945236d1ca2e814c9e86e448c56c2e479940f374b14
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                • SHA256 eb7c2d3a2addf9281c149dd373c05e1c09725cc019cf63274edeec72c2a459e2
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                • SHA256 3bae82225bceac007ff7e001ff52f88e92b6c3452762484d0b3266326a11d725
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 973B
                                                                                                                                                                                                • SHA256 07b82862ea1f6bda7d9bca1279f2cef6a7dc3ee4f0bdbb45e462bce14bf95e83
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 a25efa79dc224a18a448f553aa980c62d2e4da2010fa35f251ee2f4a082a5bdb
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 d27554cc5ed015dc62adf80b8eb1a8e9302681d20498b74fdadc8a200574a3bc
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 493B
                                                                                                                                                                                                • SHA256 1ae4a134a8b4b7c685d360bb51effe3937854f7c0899901b09e9ed715c6b0cc7
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 ac0d7c78dd0fb39e5c59d0ad09d7d323b499c88433a8af7f94e672eacb02d4dd
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 72c81675f2dd761450dbe80a5df369c20011c963664ae102d30a68e9cf1b8f33
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                • SHA256 ac6ad3b72acc278794f2b63e906b0695b52fc4107344014fc8403d8df780d553
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 e5e4d352c83612d518121f49c2a98f73ffafbf2dd7adf1e4a6df9b552431aac7
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 47809742dec2f4df1c2ceb1771167c65988dbbb7aea26da2440dcdb129c4a766
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 606e90aa86f56be22ddbe0da9a1f0cd378ade185227459b04ba25e0cd15b740f
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 8a9a96945ec7758bbd4bd503ac0c444bd8a13b5f611a30e8dd89ba8b8ace0a63
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 d3677a5caec41dec56c3a41f9b9c49c6f888446eb3388977a0dcce86c92ee42a
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 c456784795e2dc78659ae553542a2ee5a18f80b4145971bbcc63d53e8e8d93ac
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 81afc543ddd17786249d5da69b73bad0171464081d9635b22d782a2aefec3f21
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 47aba0d4347be1acb1dc348a837504ca18cde885508b10a837ee707fc502a8bd
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 8bc0454ae68566d29315e4316d707fd53ffaa06c4012f60a9f3c94a0c6d52fc0
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 d25796c7caa17c02fad503959fc697035ad697f554d211a01fd809c3448f6445
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                • SHA256 e9035946af5962b4902e964d0e306e99610803ea9f862b688e1a927e67eff549
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                • SHA256 9b326c4300ca40c0261b499151c28f6e20da9036c586b78044a6b39c037a65fc
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                • SHA256 9a90fff8fd7c0d8d8e110c12f6b49c78dc50bca51580df5bb2c31cb39913537d
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                • SHA256 dd27d4c763314375e6a397c470f139ceabc589f3d1b62e05da1149f25a485df4
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                                • SHA256 a9f370cb7bfdca1e5bab13d2c37e58d7b14cd64f175d26b72af38857d5c0fdcf
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 621B
                                                                                                                                                                                                • SHA256 a9fa72b7ff4d2ea4b197a0691094d10fd18af0f90c37b1bb92ff8689943559e4
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 79d1fbae708353a1a94ac3ce5a3000c9fb4f4b8b4c876070ef65cb8090bb4128
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 c8abc70c211e9c6e5ed129b8c295e3c07e0dd4c9d2b465c273598ce52ec23879
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 38119a071319b898a940b9d04b04473f5f5778c5632e425423d22b5a74db2c28
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 7834b9a348d01a360ffb31f5c4f6b419b658dd20a71edc6c97aeb6a212c49455
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 0be8e5776e2b20127856318fce900d86c4181362d60517039edbe18af0bad46e
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 c42a4c32e489272c3b7e3ca359eab96ea9e91a13149f2bfc9253a8379184d9ee
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 83410f393929d75dda1adb3f9277479531139cba22913df98fd2b1c88acb2324
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 06c2f52c2790e0cde2f4c2bc8ed9f9da1c6d64d46418c2ae6b75a117338bd8b6
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                • SHA256 40891964e08cb1da311804203d3c88fdb7c160e4eed80107981936dc46b58f41
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 957e231defac2baa2e78af3155b7d8b2d0ea4eda2e22d81f2d349ffbd6b0ab06
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                • SHA256 8279686a4e481de02543cf5d2e4357abc41a55fe7bb660d54f51905efac4d499
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 749B
                                                                                                                                                                                                • SHA256 c21cd329f864d48dac7994ebc1ad7eb1676e308eeea998ef7cfd2f6822ddba51
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 f5cdcdc22f71df7025afc9e8fdb3c183952218c7fe042b1f2a29f4d3e38ecc62
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                • SHA256 3a06c0e05bb8acd3b42906f06dc79f0cf66f91f28bd34f3bc4f6196b95bedb98
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                • SHA256 996a9e47f73333a4a9a2b9a440b2e5d3a2e6b48022536dfaa7404e7adb18e6f4
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 f2a945ce1cd425a744f5cab842399f235a296f243ed396b5be234216fcb11f48
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 f3eff20d4109c14477875d2848f7af0739efcb5cd50278d2f741b4ca822c3220
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                                • SHA256 89df2ee80a415869afd94fcfcc30815ee0596d13cdbd60447f676051356090a2
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                                • SHA256 01b32d77620e0d63c98f7effb2180d6882b0d6bf6af82c843250bf29d1454457
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                                • SHA256 a6904153bd9370c8195bff1341b0cc774238a32183e529474d4a00787cf0b201
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                • SHA256 736befaa0aaad909564149ec03f24912c8304ca713fab5a3291bfd61aade6e15
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                • SHA256 18668456ff5a3682f980e36312ea7b3a490a36b201d551d7c92410da08bd0a91
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                • SHA256 4db70084718fa5397c18d2211a2538c79cb4df6b93724756b746183a02a7b085
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 06dea0c4a803f21f91687ff0493d270f69e5d36b45aa70aa3b0e800c4b732345
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 1dda6896fdb3f360bf2bade751fc1ee46cab54a15eeb93d72ce19ba0934ddd59
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 f2bf5d53dfce7715d7c4fd421cff201bc1afd9064638cf526787702407778300
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                                • SHA256 6c81bcd774bbb5fff84aea6f96c538cfb163fd35090f13900ef5224fb9c7e60f
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                • SHA256 86becf293cb96cfb4be360d6419d702d862aab419635b5739f9ec151219c23dd
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                • SHA256 f7536dde4868ec0963b9ae0b48d2c1ba3e9ee4e975078c55d10234beded0adc7
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ba794e1a-9f30-4e11-b92b-64835e00b877.raw
                                                                                                                                                                                                • Size 925B
                                                                                                                                                                                                • SHA256 e51bc01bdbfc8b0d05c2c8393c6954aa02bef17f2384e381002db53f38af5816
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                cda6859f-f991-4dbb-a5ed-275120bc662a.tmp
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\cda6859f-f991-4dbb-a5ed-275120bc662a.tmp
                                                                                                                                                                                                • Size 203B
                                                                                                                                                                                                • SHA256 8242d4bead949ee029d51a6f5299ddb0a24bbbe0e5ee0cb86423f56208295fc1
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp4092.0.226234203
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4092.0.226234203
                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                • SHA256 ab8057b881eeb50620ee9ee87b8df744bae92951026d3baac96d2b8805583c32
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp4092.0.226234203
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4092.0.226234203
                                                                                                                                                                                                • Size 265B
                                                                                                                                                                                                • SHA256 2dea8f243f74de908407a7c0f6350dfd654a5070228f52cf51d00a52da5927f2
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp4092.0.226234203
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4092.0.226234203
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 ebc238e2cf44bbcdf67f8f97ca1db135325b35a7aa2b6b2143411631ca84765b
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.0.602639713
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.0.602639713
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 db676018a1fc42e0685357a037597fad15c07153f36bc8ea4a4fce345c1d2d1f
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.0.602639713
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.0.602639713
                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                • SHA256 e7ae2e291ca08faf2aefba0eadabd7305f780589b81885043bac72ed2683f5e2
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.0.602639713
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.0.602639713
                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                • SHA256 46204f5d18ecf6052e6fe4a3705409f37480a1a540645ceb4de6f59298e73629
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.0.602639713
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.0.602639713
                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                • SHA256 97c6adfa0b641f0ae65a32e605f55d704dc0c322d7a2ec794a108176ba8d209a
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.0.602639713
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.0.602639713
                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                • SHA256 3e8c50409f3aa7d572ca515aec6b5390f18e3ede10c98e24fe347385a4e50d54
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.0.602639713
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.0.602639713
                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                • SHA256 2e65b59f8353e484c04114000dd76167ee2e3af3530d382ce2c29a44bfb0dda7
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.0.602639713
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.0.602639713
                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                • SHA256 d327220e490f6eb3bcd28d662cd98cfbfc295a1a862fc240f59f7153004edd06
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.0.602639713
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.0.602639713
                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                • SHA256 bec1c49a63850af634571144db561eccef9bbac6f784e9c34e25b6fa66510a3b
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.0.602639713
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.0.602639713
                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                • SHA256 54f1f726421b9447f28554246332f175022eb1de0a7578c635ee8fa457fa2717
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.0.602639713
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.0.602639713
                                                                                                                                                                                                • Size 531B
                                                                                                                                                                                                • SHA256 e50b0a41239065bdc8ba2706a9dcc43bbc8bf0bb80e3e6c2d435c25e35123634
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.0.602639713
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.0.602639713
                                                                                                                                                                                                • Size 469B
                                                                                                                                                                                                • SHA256 02e76112ef11c57b754c5e286940aa66a77f4219f5f8ee149c2c7b83f3e62481
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 912B
                                                                                                                                                                                                • SHA256 42678ea9a3c5b5e9982d4c0a5d6f352e715e5ffe6e0a38021aa330f1f8051ecb
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 a297969430ce814201fd3dbdcf4dd0a0c71df865256b556947ae02fd5e6185dd
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 6d5407d76c948c6717b240044238bfe787bd1b9a06d73758c0f3e18b5cb8c483
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 b30bec125d0d5461f32e262da3c69cb6c4b4e40ab94236b3c567bb1c0366ced6
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                • SHA256 cd5a537e4d328e6e9f9bf71b004ece81bd5ea6a219a730b774a385f165e65dc2
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                • SHA256 3f7b7b49e877be1d6e2940d76178492b9679226a4ad0bfc6d726f05f212f0c43
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                • SHA256 a045a8a5ec259e508c52f77c8ca762c5c678212507c58f60ea1b89991e8ca84b
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                • SHA256 ab5e58bc5e373fc9489725a2b4fb82d821ff41a4b84eb8d3ebe3b0ae6963b2d7
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                • SHA256 78b97e40f01ce1c943117f86844780de04d0997673cd1af82a7a64ebefd1f8f5
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                • SHA256 fb1257e8ed010dc6364c89396eddc688a927fcaa301cdea32a252bb1684b4cde
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                • SHA256 a679eb24e64c05567c101377ea34b5a74ef1ce2b11367da0ea48a267ebacf1dd
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 1003B
                                                                                                                                                                                                • SHA256 36b5e629f0f82a6130be284c421f85296ff7c4f409ec62ca9f4c21796d4fa67f
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 636B
                                                                                                                                                                                                • SHA256 9f31c1e9c9cdd9e121becbec9c3e6e2da9c0059651f9100c036f6d53528d9ae5
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 816B
                                                                                                                                                                                                • SHA256 e67f96040738da8a6853079c0fe27c7d2ee97a64a56a633e628235fedc29ff4d
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 f35bdc3fd582791aef470ebc601b2d0772170b5f2ba922f7d782c78321de6007
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 3f02723ab0b76fdac0b96c36498749bf400fe9585131882216d0cf8c82cc0fd2
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                • SHA256 81e2e77787ebc776ebb9f94dc85c45d7c475d75e8681b88c88e77508c13721b5
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                • SHA256 5255cfb6e303916c77d54cfba3c1f7bb94ef918f28703714fafb2f7f990f0d23
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 448B
                                                                                                                                                                                                • SHA256 04d75ba86806ebcc98dd5ecd1777f860e50c27bba29980c7785850de5e32e2d3
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 546B
                                                                                                                                                                                                • SHA256 a9fcb88e843f6de86f38b12e1dc3efc11f1770e863b7ffec838d3a853af13061
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 85c52bc3f0a8d998a618d2fd709c8d467de36a21ea05333f2f31a8ddc7168d0b
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 7b98197131a6232b2dc178cbeee0360d10ae5a8f60fdd247c81efbbf9d5f2bab
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 200B
                                                                                                                                                                                                • SHA256 79f7b3894edc61990071dfafd4643168fa324a2b6602306fbbce6981d183031c
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 355B
                                                                                                                                                                                                • SHA256 d2178a731827328c92a864cc545ba36ed2024bf71dd78baabfc042c6119b383c
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 722B
                                                                                                                                                                                                • SHA256 72347c1a9dfacbdc050a2937670c619a974ac377571f760e66dc4546756eb694
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.1.969371532
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.1.969371532
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 738db2b3639ff64eb4b4d6d82dc9d80fd345502bc3dee59baabbc4c8dc1e666f
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp6952.2.120205101859cd5de9-2a02-4107-b664-c14b9c0786a8.tmp
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6952.2.120205101859cd5de9-2a02-4107-b664-c14b9c0786a8.tmp
                                                                                                                                                                                                • Size 173B
                                                                                                                                                                                                • SHA256 391c5a7e63c79b86dfd88616870dc40afcfbf721c421574d5e87c75de2ea864c
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp7912.0.1969433312
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7912.0.1969433312
                                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                                • SHA256 93d904a684ef9f6cb4095cc146c8986acbce4d160c2499b4e547be0c25b5ead4
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp7912.0.1969433312
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7912.0.1969433312
                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                • SHA256 ec7bf500c04b1030bea8e1379a71ee3dd34672d623c7acc75d505faecd53d16a
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                ssdfp7912.0.1969433312
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7912.0.1969433312
                                                                                                                                                                                                • Size 265B
                                                                                                                                                                                                • SHA256 85b92051f1407d647de732e39016334e47beb031cafc8be35c0043ea92572242
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                data_1
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                                                                                                                                                • Size 264KB
                                                                                                                                                                                                • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                data_2
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_2
                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                data_3
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_3
                                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                                • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Local State
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                                • SHA256 5eee075f7fd610a7afd9f0c82fcb0a4ca420caa22e9cc33e34bef93b2f49e4f2
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Local State
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                • SHA256 b497d8bdbd0b0234f3c3e776dd911ca21d5723acd79b8be7a5e580fb576cb68c
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                Local State
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                                • SHA256 d78108ebf0cc41d304b973c5c85ee787aa3062fe2524615cb538c33169b41ff2
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                VariationsSeedV2
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                                                                                                                                                • Size 11B
                                                                                                                                                                                                • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                VariationsSeedV2
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                                                                                                                                                • Size 19B
                                                                                                                                                                                                • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                assistant_prefs.json
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                                                                                                                                                                                • Size 151B
                                                                                                                                                                                                • SHA256 453326991565ca4c6df8baeff3ad07f0bf45d2d20e59d7b5a632fdea5e970cd7
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                cd445f3c-1f09-47d1-a431-b6791d586929.tmp
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\cd445f3c-1f09-47d1-a431-b6791d586929.tmp
                                                                                                                                                                                                • Size 151B
                                                                                                                                                                                                • SHA256 20197cf6f09e93e748a21b4179f36849062116300ba62dfe6aeeb15536f546eb
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                metadata.json515e092d-bbe2-4276-8cb6-1012c5f2f8ce.tmp
                                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\extensions_crx_cache\metadata.json515e092d-bbe2-4276-8cb6-1012c5f2f8ce.tmp
                                                                                                                                                                                                • Size 13B
                                                                                                                                                                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                                • MD5 SHA1 SHA512
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                opera-one-dark.jpg
                                                                                                                                                                                                • Path C:\Windows\SystemTemp\scoped_dir6952_1249528288\opera-one-dark.jpg
                                                                                                                                                                                                • Size 349KB
                                                                                                                                                                                                • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                persona.ini
                                                                                                                                                                                                • Path C:\Windows\SystemTemp\scoped_dir6952_1249528288\persona.ini
                                                                                                                                                                                                • Size 217B
                                                                                                                                                                                                • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                opera-one.jpg
                                                                                                                                                                                                • Path C:\Windows\SystemTemp\scoped_dir6952_858016629\opera-one.jpg
                                                                                                                                                                                                • Size 194KB
                                                                                                                                                                                                • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                persona.ini
                                                                                                                                                                                                • Path C:\Windows\SystemTemp\scoped_dir6952_858016629\persona.ini
                                                                                                                                                                                                • Size 207B
                                                                                                                                                                                                • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                                                Submit Download

                                                                                                                                                                                                memory/4600-1481-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1488-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1471-0x0000000007E50000-0x0000000007E60000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1468-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1401-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1407-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1406-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1469-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1470-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1454-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1473-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1472-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1408-0x0000000007E50000-0x0000000007E60000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1458-0x0000000007E50000-0x0000000007E60000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1477-0x0000000007E50000-0x0000000007E60000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1455-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1476-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1410-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1475-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1479-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1409-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1478-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1452-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1484-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1453-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1403-0x0000000007E50000-0x0000000007E60000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1402-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1418-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1480-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1160-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1467-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1482-0x0000000007E50000-0x0000000007E60000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1096-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1404-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1489-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1161-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1111-0x0000000007E50000-0x0000000007E60000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1094-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1417-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1419-0x0000000007E50000-0x0000000007E60000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1428-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1485-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1487-0x0000000007E50000-0x0000000007E60000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1429-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1486-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1421-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1483-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1420-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1018-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1019-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-940-0x0000000007E50000-0x0000000007E60000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1430-0x0000000007E50000-0x0000000007E60000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1425-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1426-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1424-0x0000000007E50000-0x0000000007E60000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1423-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1422-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-101-0x0000000007E50000-0x0000000007E60000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-102-0x0000000007E50000-0x0000000007E60000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-1405-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-105-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/4600-106-0x0000000006DD0000-0x0000000006DE0000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/6628-592-0x00007FFFDC090000-0x00007FFFDC091000-memory.dmp
                                                                                                                                                                                                Download

                                                                                                                                                                                                memory/6628-591-0x00007FFFDC3A0000-0x00007FFFDC3A1000-memory.dmp
                                                                                                                                                                                                Download