Overview

overview

8

Static

static

8

OperaInstaller.exe

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    67s
  • max time network
    94s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    01/10/2026, 14:04

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample261001-rdnerazcpd
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Executes dropped EXE 45 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

    defense_evasion
  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 6 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 12 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 11 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 52 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 48 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of WriteProcessMemory 45 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • Reads the TCP/IP host and domain name from the registry
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5100
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3376
      • C:\Users\Admin\AppData\Local\Temp\7zS03D5B419\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS03D5B419\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Executes dropped EXE
        • Enumerates connected drives
        • Reads the TCP/IP host and domain name from the registry
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:4304
        • C:\Users\Admin\AppData\Local\Temp\7zS03D5B419\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS03D5B419\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x2b4,0x2b8,0x2bc,0x294,0x2c0,0x7ff62b966998,0x7ff62b9669a8,0x7ff62b9669b8
          4⤵
          • Executes dropped EXE
          PID:2688
        • C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:5668
        • C:\Users\Admin\AppData\Local\Temp\7zS03D5B419\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS03D5B419\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=4304 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_20261001150525" --session-guid=0415015f-073f-4515-8cfb-85f3b48d29dd --server-tracking-blob=NThkZGFhYWE2MmUxMDU0MGNkMjczMDJkYjgyMjNkNjFlMDA1NTg1ODNkMWNmNGFiNTA4YzkwMGFjNTg4Y2VlNTp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImluc3RhbGxlcl9uYW1lIjoiT3BlcmFTZXR1cC5leGUiLCJwcm9kdWN0Ijp7Im5hbWUiOiJvcGVyYSJ9LCJxdWVyeSI6Ii9vcGVyYS9zdGFibGUvd2luZG93cz91dG1fc291cmNlPXdyayZ1dG1fbWVkaXVtPXBiJnV0bV9jYW1wYWlnbj1zcG90aWZ5X29wZXJhJnV0bV9jb250ZW50PTU2ODAzNSIsInN5c3RlbSI6eyJwbGF0Zm9ybSI6eyJhcmNoIjoieDg2XzY0Iiwib3BzeXMiOiJXaW5kb3dzIiwib3BzeXMtdmVyc2lvbiI6IjExIiwicGFja2FnZSI6IkVYRSJ9fSwidGltZXN0YW1wIjoiMTc5MDg2MzUyMi43NjUzIiwidXNlcmFnZW50IjoiT3BlcmEgSW5zdGFsbGVyLzEuMCIsInV0bSI6eyJjYW1wYWlnbiI6InNwb3RpZnlfb3BlcmEiLCJjb250ZW50IjoiNTY4MDM1IiwibWVkaXVtIjoicGIiLCJzb3VyY2UiOiJ3cmsifSwidXVpZCI6ImFiYmFiZjZhLWZiMzktNGZhMy1hNWM1LTM0NTI2MDc4YWRjZSJ9 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=0808000000000000
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:5028
          • C:\Users\Admin\AppData\Local\Temp\7zS03D5B419\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS03D5B419\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x2ac,0x2b0,0x2c0,0x288,0x2c4,0x7ff62b966998,0x7ff62b9669a8,0x7ff62b9669b8
            5⤵
            • Executes dropped EXE
            PID:2536
          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe" --backend --initial-pid=4304 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251" --session-guid=0415015f-073f-4515-8cfb-85f3b48d29dd --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=136.0.6008.80
            5⤵
            • Executes dropped EXE
            • Enumerates connected drives
            • Enumerates system info in registry
            • Modifies registry class
            • Suspicious use of WriteProcessMemory
            PID:1400
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff61e816998,0x7ff61e8169a8,0x7ff61e8169b8
              6⤵
              • Executes dropped EXE
              PID:3840
            • C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Writes a Windows system DLL name to a user directory
              • Adds Run key to start application
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:5376
              • C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x4fc9cc,0x4fc9d8,0x4fc9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:4160
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:1928
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x11bc9cc,0x11bc9d8,0x11bc9e4
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:2780
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Reads the TCP/IP host and domain name from the registry
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:2356
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:1984
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffd2a31bdb0,0x7ffd2a31bdc0,0x7ffd2a31bdd0
                      10⤵
                      • Executes dropped EXE
                      PID:1536
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:4244
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffd2a31bdb0,0x7ffd2a31bdc0,0x7ffd2a31bdd0
                      10⤵
                      • Executes dropped EXE
                      PID:4288
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2a8,0x2ac,0x2b0,0x25c,0x2b4,0x11d7324,0x11d7330,0x11d733c
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:3468
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:5820
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffd2a31bdb0,0x7ffd2a31bdc0,0x7ffd2a31bdd0
                        11⤵
                        • Executes dropped EXE
                        PID:3124
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:4404
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x27c,0x280,0x284,0x278,0x288,0x7ffd2a31bdb0,0x7ffd2a31bdc0,0x7ffd2a31bdd0
                        11⤵
                        • Executes dropped EXE
                        PID:2556
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:1872
                      • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffd2a31bdb0,0x7ffd2a31bdc0,0x7ffd2a31bdd0
                        11⤵
                        • Executes dropped EXE
                        PID:3620
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:1772
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffd2a31bdb0,0x7ffd2a31bdc0,0x7ffd2a31bdd0
                7⤵
                • Executes dropped EXE
                PID:2420
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1708,i,16095372869346053362,11980279845305630012,262144 --field-trial-handle=2152,i,12096383831377867703,6440908796435657630,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,13120521672311200490,2876932296170567820,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2148 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:3320
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1904,i,1975040290118026379,217184478612982413,524288 --field-trial-handle=2152,i,12096383831377867703,6440908796435657630,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,13120521672311200490,2876932296170567820,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2360 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Time Discovery
                • Enumerates system info in registry
                PID:3152
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2576,i,4848528216239370741,14966298102679608982,524288 --field-trial-handle=2152,i,12096383831377867703,6440908796435657630,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,13120521672311200490,2876932296170567820,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2640 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:1552
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3960,i,16356223357240617568,17729987203979977936,2097152 --field-trial-handle=2152,i,12096383831377867703,6440908796435657630,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,13120521672311200490,2876932296170567820,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=4004 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:1020
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4336,i,13569422981234603180,15014426220826870269,524288 --field-trial-handle=2152,i,12096383831377867703,6440908796435657630,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,13120521672311200490,2876932296170567820,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4344 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4828
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4516,i,1505626467875774712,2452162014742974360,2097152 --field-trial-handle=2152,i,12096383831377867703,6440908796435657630,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,13120521672311200490,2876932296170567820,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4576 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4240
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4788,i,16139730278869857697,17542156386784417051,524288 --field-trial-handle=2152,i,12096383831377867703,6440908796435657630,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,13120521672311200490,2876932296170567820,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4812 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:2560
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3220,i,10145636244851741724,13737568651734322352,524288 --field-trial-handle=2152,i,12096383831377867703,6440908796435657630,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,13120521672311200490,2876932296170567820,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4980 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:928
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5212,i,3343564334927073495,4275532994772991512,2097152 --field-trial-handle=2152,i,12096383831377867703,6440908796435657630,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,13120521672311200490,2876932296170567820,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5224 /prefetch:1
                7⤵
                • Executes dropped EXE
                PID:1224
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4104,i,11296006291434123379,1463621924697664554,524288 --field-trial-handle=2152,i,12096383831377867703,6440908796435657630,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,13120521672311200490,2876932296170567820,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5380 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4920
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\additional_file2.tmp"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Adds Run key to start application
              • Drops file in Windows directory
              • Reads the TCP/IP host and domain name from the registry
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious use of WriteProcessMemory
              PID:7148
              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffd2a31bdb0,0x7ffd2a31bdc0,0x7ffd2a31bdd0
                7⤵
                • Executes dropped EXE
                PID:4896
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1892,i,14887673653765165798,17130367823055668399,524288 --field-trial-handle=2212,i,2605551593872180896,10607062292819753688,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,13925410772325879177,18049927336187161774,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2244 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                • Enumerates system info in registry
                PID:6312
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1712,i,722687050603634902,14727966185886885890,262144 --field-trial-handle=2212,i,2605551593872180896,10607062292819753688,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,13925410772325879177,18049927336187161774,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2208 /prefetch:2
                7⤵
                • Executes dropped EXE
                PID:3504
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2512,i,1518265712423002826,11844542429086736279,524288 --field-trial-handle=2212,i,2605551593872180896,10607062292819753688,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,13925410772325879177,18049927336187161774,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2724 /prefetch:13
                7⤵
                  PID:2428
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3932,i,9425358146460008027,11950844338819642887,2097152 --field-trial-handle=2212,i,2605551593872180896,10607062292819753688,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,13925410772325879177,18049927336187161774,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3984 /prefetch:9
                  7⤵
                    PID:6416
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4316,i,4468273461781258750,18229478335577872851,524288 --field-trial-handle=2212,i,2605551593872180896,10607062292819753688,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,13925410772325879177,18049927336187161774,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4336 /prefetch:14
                    7⤵
                      PID:6440
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4376,i,9388318913742790717,7845577626028126447,2097152 --field-trial-handle=2212,i,2605551593872180896,10607062292819753688,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,13925410772325879177,18049927336187161774,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4464 /prefetch:9
                      7⤵
                        PID:6420
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4412,i,13660435065749663642,12716210052145688186,524288 --field-trial-handle=2212,i,2605551593872180896,10607062292819753688,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,13925410772325879177,18049927336187161774,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4832 /prefetch:12
                        7⤵
                          PID:6804
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4940,i,11253908186443414547,9154444572096828354,524288 --field-trial-handle=2212,i,2605551593872180896,10607062292819753688,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,13925410772325879177,18049927336187161774,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4952 /prefetch:14
                          7⤵
                            PID:2104
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5160,i,6829656794966491341,2585188790412357846,524288 --field-trial-handle=2212,i,2605551593872180896,10607062292819753688,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,13925410772325879177,18049927336187161774,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5132 /prefetch:14
                            7⤵
                              PID:7040
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                            6⤵
                              PID:5624
                              • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                                C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffd2a31bdb0,0x7ffd2a31bdc0,0x7ffd2a31bdd0
                                7⤵
                                  PID:3256
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1708,i,10843066955224578137,17143229474789830763,262144 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2004 /prefetch:2
                                  7⤵
                                    PID:5864
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2024,i,10584297875817885889,14155611389695664098,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2044 /prefetch:11
                                    7⤵
                                    • System Time Discovery
                                    PID:4500
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2384,i,11391682837152608268,17435538175326024715,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2608 /prefetch:13
                                    7⤵
                                      PID:616
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3224,i,14290216622968953841,4821287629887974654,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3284 /prefetch:14
                                      7⤵
                                        PID:1020
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3208,i,7148956299329337809,2731415164513615980,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3304 /prefetch:14
                                        7⤵
                                          PID:6772
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3244,i,13633076977389394261,5373203590738418381,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3324 /prefetch:14
                                          7⤵
                                            PID:2812
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3256,i,12990154211443724526,15233710375389323078,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3276 /prefetch:14
                                            7⤵
                                              PID:3904
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3344,i,2293407473560187226,715577484260583109,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3464 /prefetch:14
                                              7⤵
                                                PID:7132
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3356,i,15007331881094572314,6652721214255043252,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3488 /prefetch:14
                                                7⤵
                                                  PID:5684
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3368,i,12896694011621125139,13686263197146926610,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3508 /prefetch:14
                                                  7⤵
                                                    PID:4124
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3428,i,10615266878160895920,7404588044770960080,2097152 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3528 /prefetch:1
                                                    7⤵
                                                      PID:4240
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_gx_splash.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                                                      7⤵
                                                        PID:5832
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4812,i,1314200948408340903,14876509088729979190,2097152 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4816 /prefetch:9
                                                        7⤵
                                                          PID:7048
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4976,i,16772270637654311986,7873954185003953840,2097152 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4992 /prefetch:1
                                                          7⤵
                                                            PID:4300
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5268,i,4531093861290395653,6342734393810181972,2097152 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5284 /prefetch:1
                                                            7⤵
                                                              PID:6852
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5416,i,5331759784317471820,8042930050760951470,2097152 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5436 /prefetch:1
                                                              7⤵
                                                                PID:6536
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5964,i,3415612333591457440,7136075426461191171,2097152 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6324 /prefetch:9
                                                                7⤵
                                                                  PID:6752
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=7044,i,9848134398659689522,1103792737044164265,2097152 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=7088 /prefetch:9
                                                                  7⤵
                                                                    PID:1704
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6592,i,11284809598127938378,8957164417094149175,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6620 /prefetch:14
                                                                    7⤵
                                                                      PID:4488
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5624,i,2960618288351550152,16664087167450650194,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6540 /prefetch:14
                                                                      7⤵
                                                                        PID:6784
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7196,i,14055618782175178631,6030286470067277445,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7068 /prefetch:14
                                                                        7⤵
                                                                          PID:5676
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7480,i,8160075088808994778,8015405747124491293,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6580 /prefetch:14
                                                                          7⤵
                                                                            PID:6196
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7488,i,17728284133905117740,10961578924460299557,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7588 /prefetch:14
                                                                            7⤵
                                                                              PID:4948
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7596,i,4437815196412854158,14517198142560765924,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7616 /prefetch:14
                                                                              7⤵
                                                                                PID:7120
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7864,i,6319912512814428685,4199904695046934356,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7876 /prefetch:14
                                                                                7⤵
                                                                                  PID:2892
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7996,i,160728952279828387,10683513682094176396,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=8004 /prefetch:14
                                                                                  7⤵
                                                                                    PID:6516
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8012,i,14706059163767848871,14306650849744653563,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8036 /prefetch:14
                                                                                    7⤵
                                                                                      PID:6740
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8280,i,10703337297332068566,18228143016827338064,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8288 /prefetch:14
                                                                                      7⤵
                                                                                        PID:4120
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8420,i,12915154821271365998,15689092193716319296,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8428 /prefetch:14
                                                                                        7⤵
                                                                                          PID:2180
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8444,i,3659010914985626515,1332679079772779559,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8460 /prefetch:14
                                                                                          7⤵
                                                                                            PID:5640
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8700,i,2109262873272885225,13136714495595941883,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8708 /prefetch:14
                                                                                            7⤵
                                                                                              PID:6524
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8728,i,9488597742806459588,18296762671584470643,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8880 /prefetch:14
                                                                                              7⤵
                                                                                                PID:6860
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9044,i,2161340623430002825,917068887741975118,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=3412 /prefetch:12
                                                                                                7⤵
                                                                                                  PID:5516
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6972,i,9927529355263529532,3423550950209811659,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9088 /prefetch:14
                                                                                                  7⤵
                                                                                                    PID:2172
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=9144,i,15780918672400448782,10692507167280430542,2097152 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9176 /prefetch:9
                                                                                                    7⤵
                                                                                                      PID:5188
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9536,i,11949841635271695036,1844190288425130000,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9560 /prefetch:14
                                                                                                      7⤵
                                                                                                        PID:4920
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9712,i,15823211307117721679,9784130404750512605,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9724 /prefetch:14
                                                                                                        7⤵
                                                                                                          PID:6408
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9136,i,9813549731669802295,7956745681456293700,2097152 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9888 /prefetch:1
                                                                                                          7⤵
                                                                                                            PID:7044
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                                                                                            7⤵
                                                                                                              PID:7704
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff6a6ac5598,0x7ff6a6ac55a8,0x7ff6a6ac55b8
                                                                                                                8⤵
                                                                                                                  PID:7808
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5164,i,4533042853446124394,7325224366884387642,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10172 /prefetch:14
                                                                                                                7⤵
                                                                                                                  PID:7720
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9856,i,18054676953377571229,10887636525781115378,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9160 /prefetch:14
                                                                                                                  7⤵
                                                                                                                    PID:7984
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --metrics-shmem-handle=10632,i,11638485530429957029,13030384572846923375,2097152 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10596 /prefetch:1
                                                                                                                    7⤵
                                                                                                                      PID:7440
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10780,i,13920488166897723120,2195376399533474856,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10784 /prefetch:14
                                                                                                                      7⤵
                                                                                                                        PID:7532
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10916,i,10082165390338675470,6988870831849341361,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10932 /prefetch:14
                                                                                                                        7⤵
                                                                                                                          PID:7472
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11096,i,1704380021040786487,9837513744699648608,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11128 /prefetch:14
                                                                                                                          7⤵
                                                                                                                            PID:6468
                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10952,i,15046350208730743240,16826915541342869022,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11108 /prefetch:14
                                                                                                                            7⤵
                                                                                                                              PID:4684
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11336,i,16406167043837830970,18427971548784999813,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11364 /prefetch:14
                                                                                                                              7⤵
                                                                                                                                PID:7180
                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11696,i,11240775799866721295,17199582528698812323,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11692 /prefetch:14
                                                                                                                                7⤵
                                                                                                                                  PID:8112
                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3372,i,10160899016411621179,9746535264590370007,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=3496 /prefetch:14
                                                                                                                                  7⤵
                                                                                                                                    PID:8176
                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11928,i,7384325407524554606,16528999878672612531,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=11940 /prefetch:14
                                                                                                                                    7⤵
                                                                                                                                      PID:6572
                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3936,i,14562958795818668327,1258941797942692591,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=3960 /prefetch:14
                                                                                                                                      7⤵
                                                                                                                                        PID:6712
                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3916,i,559853301651248971,8596618797942340716,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=10792 /prefetch:14
                                                                                                                                        7⤵
                                                                                                                                          PID:8188
                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3616,i,5359002329921154827,7679624429132265118,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=4268 /prefetch:14
                                                                                                                                          7⤵
                                                                                                                                            PID:7892
                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=10844,i,7645285379358120566,6855513417312844793,2097152 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=4240 /prefetch:9
                                                                                                                                            7⤵
                                                                                                                                              PID:8076
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10824,i,5142467053629577785,7055855063088698497,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=4228 /prefetch:14
                                                                                                                                              7⤵
                                                                                                                                                PID:6384
                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11800,i,9848843434389839053,13388539813583189821,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=8408 /prefetch:14
                                                                                                                                                7⤵
                                                                                                                                                  PID:6244
                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=10948,i,2475421294954508926,15280636927930059848,2097152 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=6796 /prefetch:9
                                                                                                                                                  7⤵
                                                                                                                                                    PID:2876
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3552,i,18361076152440242926,16352106935920023075,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=3936 /prefetch:14
                                                                                                                                                    7⤵
                                                                                                                                                      PID:3752
                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10816,i,4542495604078330901,13768604617706465614,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=10864 /prefetch:14
                                                                                                                                                      7⤵
                                                                                                                                                        PID:2172
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3952,i,17540014245673451666,2706209419390701184,524288 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8720 /prefetch:14
                                                                                                                                                        7⤵
                                                                                                                                                          PID:6252
                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:inactivity-overlay=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=12068,i,1043089905864986232,5608533507571795303,2097152 --field-trial-handle=2008,i,9475829099682228426,8962410587621331683,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2012,i,7617576051475966414,7388677845280564144,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=10892 /prefetch:9
                                                                                                                                                          7⤵
                                                                                                                                                            PID:8056
                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"
                                                                                                                                                      4⤵
                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                      • Writes a Windows system DLL name to a user directory
                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                      PID:4192
                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\assistant\assistant_installer.exe
                                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\assistant\assistant_installer.exe" --version
                                                                                                                                                      4⤵
                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                      • Loads dropped DLL
                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                      • Enumerates system info in registry
                                                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                                                      PID:3088
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\assistant\assistant_installer.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0x4fc9cc,0x4fc9d8,0x4fc9e4
                                                                                                                                                        5⤵
                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                        PID:3856
                                                                                                                                              • C:\Windows\system32\svchost.exe
                                                                                                                                                C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                                1⤵
                                                                                                                                                  PID:1740
                                                                                                                                                • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                                                  C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                                                  1⤵
                                                                                                                                                    PID:2568
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                                                                                                                    1⤵
                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                    • Loads dropped DLL
                                                                                                                                                    • Enumerates system info in registry
                                                                                                                                                    • Suspicious use of WriteProcessMemory
                                                                                                                                                    PID:1388
                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                                                                                                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffd2a31bdb0,0x7ffd2a31bdc0,0x7ffd2a31bdd0
                                                                                                                                                      2⤵
                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                      PID:5956
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                                                                                                    1⤵
                                                                                                                                                      PID:7712
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff6a6ac5598,0x7ff6a6ac55a8,0x7ff6a6ac55b8
                                                                                                                                                        2⤵
                                                                                                                                                          PID:7280
                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                                                                                                                          2⤵
                                                                                                                                                            PID:7260
                                                                                                                                                        • C:\Windows\SysWOW64\DllHost.exe
                                                                                                                                                          C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                                                                                                                                                          1⤵
                                                                                                                                                            PID:6996
                                                                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                                                                            C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                                                                                                                            1⤵
                                                                                                                                                              PID:7548

                                                                                                                                                            Network

                                                                                                                                                                  MITRE ATT&CK Enterprise v16

                                                                                                                                                                  Reconnaissance

                                                                                                                                                                  Resource Development

                                                                                                                                                                  Initial Access

                                                                                                                                                                  Execution

                                                                                                                                                                  Persistence

                                                                                                                                                                  Boot or Logon Autostart Execution

                                                                                                                                                                  1
                                                                                                                                                                  T1547

                                                                                                                                                                  Registry Run Keys / Startup Folder

                                                                                                                                                                  1
                                                                                                                                                                  T1547.001

                                                                                                                                                                  Event Triggered Execution

                                                                                                                                                                  1
                                                                                                                                                                  T1546

                                                                                                                                                                  Component Object Model Hijacking

                                                                                                                                                                  1
                                                                                                                                                                  T1546.015

                                                                                                                                                                  Hijack Execution Flow

                                                                                                                                                                  1
                                                                                                                                                                  T1574

                                                                                                                                                                  DLL Search Order Hijacking

                                                                                                                                                                  1
                                                                                                                                                                  T1574.001

                                                                                                                                                                  Privilege Escalation

                                                                                                                                                                  Boot or Logon Autostart Execution

                                                                                                                                                                  1
                                                                                                                                                                  T1547

                                                                                                                                                                  Registry Run Keys / Startup Folder

                                                                                                                                                                  1
                                                                                                                                                                  T1547.001

                                                                                                                                                                  Event Triggered Execution

                                                                                                                                                                  1
                                                                                                                                                                  T1546

                                                                                                                                                                  Component Object Model Hijacking

                                                                                                                                                                  1
                                                                                                                                                                  T1546.015

                                                                                                                                                                  Hijack Execution Flow

                                                                                                                                                                  1
                                                                                                                                                                  T1574

                                                                                                                                                                  DLL Search Order Hijacking

                                                                                                                                                                  1
                                                                                                                                                                  T1574.001

                                                                                                                                                                  Defense Evasion

                                                                                                                                                                  Hijack Execution Flow

                                                                                                                                                                  1
                                                                                                                                                                  T1574

                                                                                                                                                                  DLL Search Order Hijacking

                                                                                                                                                                  1
                                                                                                                                                                  T1574.001

                                                                                                                                                                  Masquerading

                                                                                                                                                                  1
                                                                                                                                                                  T1036

                                                                                                                                                                  Match Legitimate Name or Location

                                                                                                                                                                  1
                                                                                                                                                                  T1036.005

                                                                                                                                                                  Modify Registry

                                                                                                                                                                  2
                                                                                                                                                                  T1112

                                                                                                                                                                  Credential Access

                                                                                                                                                                  Credentials from Password Stores

                                                                                                                                                                  1
                                                                                                                                                                  T1555

                                                                                                                                                                  Credentials from Web Browsers

                                                                                                                                                                  1
                                                                                                                                                                  T1555.003

                                                                                                                                                                  Unsecured Credentials

                                                                                                                                                                  1
                                                                                                                                                                  T1552

                                                                                                                                                                  Credentials In Files

                                                                                                                                                                  1
                                                                                                                                                                  T1552.001

                                                                                                                                                                  Discovery

                                                                                                                                                                  Peripheral Device Discovery

                                                                                                                                                                  1
                                                                                                                                                                  T1120

                                                                                                                                                                  Query Registry

                                                                                                                                                                  5
                                                                                                                                                                  T1012

                                                                                                                                                                  System Information Discovery

                                                                                                                                                                  4
                                                                                                                                                                  T1082

                                                                                                                                                                  System Location Discovery

                                                                                                                                                                  1
                                                                                                                                                                  T1614

                                                                                                                                                                  System Language Discovery

                                                                                                                                                                  1
                                                                                                                                                                  T1614.001

                                                                                                                                                                  System Network Configuration Discovery

                                                                                                                                                                  1
                                                                                                                                                                  T1016

                                                                                                                                                                  System Time Discovery

                                                                                                                                                                  1
                                                                                                                                                                  T1124

                                                                                                                                                                  Lateral Movement

                                                                                                                                                                  Collection

                                                                                                                                                                  Data from Local System

                                                                                                                                                                  1
                                                                                                                                                                  T1005

                                                                                                                                                                  Command and Control

                                                                                                                                                                  Exfiltration

                                                                                                                                                                  Impact

                                                                                                                                                                  Replay Monitor

                                                                                                                                                                  Loading Replay Monitor...

                                                                                                                                                                  Downloads

                                                                                                                                                                  E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                                  • Size 471B
                                                                                                                                                                  • SHA256 8b59ffaf49a6819229547efe480edc277295a5645954248da7539380f74cebfa
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                                  • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                                                                                                                  • Size 416B
                                                                                                                                                                  • SHA256 06bb0fbbb690034f3dc46b7d62f2d75b1631e1a5f1d2d6756a100ca5d20b5ff6
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  data_0
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                  Submit Download

                                                                                                                                                                  data_2
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                  Submit Download

                                                                                                                                                                  data_3
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                  Submit Download

                                                                                                                                                                  136.0.6008.80.manifest
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\136.0.6008.80.manifest
                                                                                                                                                                  • Size 225B
                                                                                                                                                                  • SHA256 0b42e2f6e44cb617486730d36045d7eafdb43c83e473dc2446fc266e3091fd12
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  150x150Logo.scale-100.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-100.png
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  150x150Logo.scale-100_contrast-white.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  150x150Logo.scale-140.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-140.png
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  150x150Logo.scale-140_contrast-white.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  150x150Logo.scale-180.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-180.png
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  150x150Logo.scale-180_contrast-white.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  150x150Logo.scale-80.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-80.png
                                                                                                                                                                  • Size 827B
                                                                                                                                                                  • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  150x150Logo.scale-80_contrast-white.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                                                                                                  • Size 799B
                                                                                                                                                                  • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  70x70Logo.scale-100.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-100.png
                                                                                                                                                                  • Size 781B
                                                                                                                                                                  • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  70x70Logo.scale-100_contrast-white.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                                                                                                  • Size 752B
                                                                                                                                                                  • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  70x70Logo.scale-140.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-140.png
                                                                                                                                                                  • Size 991B
                                                                                                                                                                  • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  70x70Logo.scale-140_contrast-white.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-140_contrast-white.png
                                                                                                                                                                  • Size 865B
                                                                                                                                                                  • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  70x70Logo.scale-180.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-180.png
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  70x70Logo.scale-180_contrast-white.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-180_contrast-white.png
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  70x70Logo.scale-80.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-80.png
                                                                                                                                                                  • Size 590B
                                                                                                                                                                  • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  70x70Logo.scale-80_contrast-white.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-80_contrast-white.png
                                                                                                                                                                  • Size 519B
                                                                                                                                                                  • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  assistant_package
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\assistant_package
                                                                                                                                                                  • Size 3.6MB
                                                                                                                                                                  • SHA256 48fb4ec141322aa1e753876ce4105ac61735f7c0d744a73ff4a209e09ab2b023
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  d3dcompiler_47.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\d3dcompiler_47.dll
                                                                                                                                                                  • Size 4.5MB
                                                                                                                                                                  • SHA256 c0e3f27b85a7717c807d862b7e64b1599a6a8827cc47d671856ce03a3b04fa44
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  dxcompiler.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\dxcompiler.dll
                                                                                                                                                                  • Size 24.6MB
                                                                                                                                                                  • SHA256 3d67684140102197b12b6748e24ba4cd33af2e14876eb981bfd0c24a2c6ac569
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  dxil.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\dxil.dll
                                                                                                                                                                  • Size 1.5MB
                                                                                                                                                                  • SHA256 ba28de1e6e486ab1ad22e6a2eab96bbb7c34a251134f4aab17013571b1245dfd
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  files_list
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\files_list
                                                                                                                                                                  • Size 6KB
                                                                                                                                                                  • SHA256 025d2bcd28ea1b90db693e54070ea99536e11ca16933896673db16bf498ece34
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  headless_command_resources.pak
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\headless_command_resources.pak
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 90e398ef08a0178d1efd373addb5070a551011be8b9d27fcc2f234e430a8ad98
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  icudtl.dat
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\icudtl.dat
                                                                                                                                                                  • Size 10.4MB
                                                                                                                                                                  • SHA256 f11071c692e85689891070cb6f68120dc1a49941325325f7e5b017af42483e72
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  installer.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe
                                                                                                                                                                  • Size 8.3MB
                                                                                                                                                                  • SHA256 a49318e66f5c3d66c8e2c09f0879eafb87f8d3c03152db579baafd5e5a744279
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  installer_helper_64.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer_helper_64.exe
                                                                                                                                                                  • Size 601KB
                                                                                                                                                                  • SHA256 3701dd526b94855901ed47b4cc0ddd7810af5eac7aceb43fd8a4fef2fac1b4cc
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  libEGL.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\libEGL.dll
                                                                                                                                                                  • Size 460KB
                                                                                                                                                                  • SHA256 9a596bc1cae71bf1a53d83316a9e23cdf61283f160b227267dc6364ff0f269ce
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  libGLESv2.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\libGLESv2.dll
                                                                                                                                                                  • Size 460KB
                                                                                                                                                                  • SHA256 e8eb8bf566654d5d6afb83ecfc99900381a7297d8e45f1c9fcb1a776b82a0b56
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  bg.pak
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\bg.pak
                                                                                                                                                                  • Size 1021KB
                                                                                                                                                                  • SHA256 7958eea00f4ef14a9b3a9021b87ae4cdace36ca171d6487e09427c980925066a
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  bn.pak
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\bn.pak
                                                                                                                                                                  • Size 1.3MB
                                                                                                                                                                  • SHA256 6307636ac68ea9742dba9dcafd1a6cba2c086be46c25fc10c9392a083f67a763
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ca.pak
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\ca.pak
                                                                                                                                                                  • Size 642KB
                                                                                                                                                                  • SHA256 0cb115bf30541172098fb7a542713d2a86607e1c9f6c36e459015f0b2cc2876c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  cs.pak
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\cs.pak
                                                                                                                                                                  • Size 641KB
                                                                                                                                                                  • SHA256 b8a82ad00c2a033704cf0a9b6a20d4c48f61cab7d6fafd60d5ed7120946d0a64
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  da.pak
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\da.pak
                                                                                                                                                                  • Size 590KB
                                                                                                                                                                  • SHA256 1d767d2231eeaf346ee7d5eafceaef5884df41666cafa057ec9784da278a75c1
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  de.pak
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\de.pak
                                                                                                                                                                  • Size 639KB
                                                                                                                                                                  • SHA256 ed7fd31b1e80c5de13e985a0c15becf8c99f6bc153891c853e144a05b1bf603f
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  el.pak
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\el.pak
                                                                                                                                                                  • Size 1.1MB
                                                                                                                                                                  • SHA256 fa8f4b42f21b74e386c88f66aa6802076e78da4e442fd74d875cbccd6af00419
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  en-GB.pak
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\en-GB.pak
                                                                                                                                                                  • Size 518KB
                                                                                                                                                                  • SHA256 6f735948c21e15f796292e92dda0f4820982774f9b3adfd31a6a3c11284783fc
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  en-US.pak
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\en-US.pak
                                                                                                                                                                  • Size 521KB
                                                                                                                                                                  • SHA256 43d287ec974b976f98ebc934b980e24628da839fea1fe53f61977420367a7501
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  installer_prefs.json
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 7d60e0c87b9be1a9618b6e73846ced62ba3bee23c749a1a86fa46c0b807d4bb1
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Opera Browser.lnk
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\Opera Browser.lnk
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 df620f68188da3a1cf540567442c6f1f9da9c042f133d6f48bccaf87d07324c5
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  additional_file0.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\additional_file0.tmp
                                                                                                                                                                  • Size 2.9MB
                                                                                                                                                                  • SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  assistant_installer.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\assistant\assistant_installer.exe
                                                                                                                                                                  • Size 2.4MB
                                                                                                                                                                  • SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  dbgcore.DLL
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\assistant\dbgcore.DLL
                                                                                                                                                                  • Size 196KB
                                                                                                                                                                  • SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  dbghelp.dll
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\assistant\dbghelp.dll
                                                                                                                                                                  • Size 1.8MB
                                                                                                                                                                  • SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  installer_prefs_include.json
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\installer_prefs_include.json
                                                                                                                                                                  • Size 264B
                                                                                                                                                                  • SHA256 dcc0b2ed26be55a15db33833e494a24b4371d3f5cceb927eb58954ac0b05723b
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  installer_prefs_include.json
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\installer_prefs_include.json
                                                                                                                                                                  • Size 279B
                                                                                                                                                                  • SHA256 23aff15e92e2cc1408d05a732152de9187b0cf2e0e087a77adc020fa7a8bd55b
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  installer_prefs_include.json
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\.opera\7535374c-0c06-41e7-89b0-fc290b5e3895 Opera Installer Temp\opera_package_202610011505251\installer_prefs_include.json
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 9e97241712b09df126912db7fb5506737c7ea38a9a6491b1630fb9daa59de64b
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  installer.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\7zS03D5B419\installer.exe
                                                                                                                                                                  • Size 8.3MB
                                                                                                                                                                  • SHA256 20b18b3c0b48d9ee2776e3972e1d4215c5b715be7d4d895caa4d3e445d12beb5
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  OpInst.exe
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                                                                                                                                  • Size 3.1MB
                                                                                                                                                                  • SHA256 da9d3037824d28cd878a35c2e21872de1615f9416b6a961b378f7b12fcd17ac5
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  bg.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                                                                                                                                  • Size 224KB
                                                                                                                                                                  • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  favicon_opera_one.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1772_1651616611\CRX_INSTALL\favicon_opera_one.png
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Icon_Light_Neutral.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5624_1030291370\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  messages.json
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7148_1728386484\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                                  • Size 401B
                                                                                                                                                                  • SHA256 9ad8ffac49958d5bf771eb6f0bd7462b32597696c9d0a45ade771ef8c124b1bb
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  settings.dat
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                                                                                                  • Size 40B
                                                                                                                                                                  • SHA256 7d46f48041e90b9805aab729344a2b7779fa1c9ab66ff378a7580c99cb195b9b
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  240df90a-8685-4291-a595-6da5c157f9b4.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\240df90a-8685-4291-a595-6da5c157f9b4.tmp
                                                                                                                                                                  • Size 401B
                                                                                                                                                                  • SHA256 7b41e44f4eb030ab096da59b2add1bfc06fa1545a9c8db4e8d616859455babfc
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  84faccad-34ae-4eec-8ea3-946ced553165.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\84faccad-34ae-4eec-8ea3-946ced553165.tmp
                                                                                                                                                                  • Size 171B
                                                                                                                                                                  • SHA256 31fd26993d062fbad9c8bca91906939c5ba6b0464652b9339443dcac451be046
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  BookmarkMergedSurfaceOrdering1bf03e1f-7406-4b3e-a66c-da38d5c7aea8.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrdering1bf03e1f-7406-4b3e-a66c-da38d5c7aea8.tmp
                                                                                                                                                                  • Size 6B
                                                                                                                                                                  • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Bookmarks
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                                                                                                                  • Size 34KB
                                                                                                                                                                  • SHA256 63fb6de5a97931fe9f2bfc0a70b58ce83e5ba235ce4fe2000373773378f5c9ed
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  BookmarksExtras
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                                                                                                                  • Size 241KB
                                                                                                                                                                  • SHA256 6f140c7464967deb3ed6850115a5e89a711cd2ccf61231aba4a5b06e3ec16c75
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  BookmarksExtras8b9af817-9d10-4788-b1bd-14921e1438dd.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras8b9af817-9d10-4788-b1bd-14921e1438dd.tmp
                                                                                                                                                                  • Size 2B
                                                                                                                                                                  • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  880fa155-dee4-437a-adb0-1caf0a2e1cb1.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\880fa155-dee4-437a-adb0-1caf0a2e1cb1.tmp
                                                                                                                                                                  • Size 48B
                                                                                                                                                                  • SHA256 356a58f238d814595f4e6cf85c772e52543a35f965100768d0a09d07f3bfba6f
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                  • Size 336B
                                                                                                                                                                  • SHA256 3265b1b8f671ab64c5823a50c1dfd5181340561f0896bab7e6a87f19cec16a48
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                  • Size 336B
                                                                                                                                                                  • SHA256 3015d1b7bc8588345acc8981d02ddadc3a08f01fa2766a726ade0985c1d7d9c4
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  CURRENT
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\CURRENT
                                                                                                                                                                  • Size 16B
                                                                                                                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  MANIFEST-000001
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Scripts\MANIFEST-000001
                                                                                                                                                                  • Size 41B
                                                                                                                                                                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  preview.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\bckiheihmdiaaoadimffbjbjafkoooaj\1.0.4_0\wallpaper\preview.png
                                                                                                                                                                  • Size 464KB
                                                                                                                                                                  • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  main.js
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
                                                                                                                                                                  • Size 47KB
                                                                                                                                                                  • SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  logo_128.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_128.png
                                                                                                                                                                  • Size 7KB
                                                                                                                                                                  • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  logo_16.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_16.png
                                                                                                                                                                  • Size 653B
                                                                                                                                                                  • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  logo_32.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_32.png
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  logo_48.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_48.png
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  logo_64.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\icons\logo_64.png
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  service-worker-loader.js
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                                                                                                                                                  • Size 49B
                                                                                                                                                                  • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  favicon_opera_one.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\favicon_opera_one.png
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  reader_mode.js
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\reader_mode.js
                                                                                                                                                                  • Size 112KB
                                                                                                                                                                  • SHA256 17f8a5c1d70acee668cc6964317d88802d4409c32b0d7e292b95e1de8ddb16df
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  spotify_frame_interceptor.js
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.68_0\spotify_frame_interceptor.js
                                                                                                                                                                  • Size 5KB
                                                                                                                                                                  • SHA256 895ef6ae0efde6f5e8af23d1acbfac4a5351bda31c89d2e64c05f2de0181dd56
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  background.js
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
                                                                                                                                                                  • Size 87KB
                                                                                                                                                                  • SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Icon_Light_Neutral.png
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  popup.js.LICENSE.txt
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\popup.js.LICENSE.txt
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  rules.json
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\rules.json
                                                                                                                                                                  • Size 839B
                                                                                                                                                                  • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  33701a91-400c-4549-871e-880d37d43172.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\33701a91-400c-4549-871e-880d37d43172.tmp
                                                                                                                                                                  • Size 27KB
                                                                                                                                                                  • SHA256 96092642177bb660dd55afcb6f5ac91a4facb6b88067958b5580b3a1d5cb53b2
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  597ab28d-856b-45c4-b44b-e899cc88c410.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\597ab28d-856b-45c4-b44b-e899cc88c410.tmp
                                                                                                                                                                  • Size 27KB
                                                                                                                                                                  • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  6924d460-4e64-4f71-98b3-86cbb74f8f79.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\6924d460-4e64-4f71-98b3-86cbb74f8f79.tmp
                                                                                                                                                                  • Size 27KB
                                                                                                                                                                  • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  778d0de4-a396-4da2-a18d-4f086c68ac7b.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\778d0de4-a396-4da2-a18d-4f086c68ac7b.tmp
                                                                                                                                                                  • Size 27KB
                                                                                                                                                                  • SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  aa018d4a-e16f-49f2-a078-9c22cf6cc6fb.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\aa018d4a-e16f-49f2-a078-9c22cf6cc6fb.tmp
                                                                                                                                                                  • Size 27KB
                                                                                                                                                                  • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  dd31979c-38aa-4399-a683-7f4b428a851d.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\dd31979c-38aa-4399-a683-7f4b428a851d.tmp
                                                                                                                                                                  • Size 27KB
                                                                                                                                                                  • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Network Persistent State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                                                                                                  • Size 61B
                                                                                                                                                                  • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Network Persistent Stated5ce1f00-9ace-4c71-965d-ce6d898b22c6.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent Stated5ce1f00-9ace-4c71-965d-ce6d898b22c6.tmp
                                                                                                                                                                  • Size 111B
                                                                                                                                                                  • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  SCT Auditing Pending Reports32f2d806-ee84-4643-b2a7-7a7526a82f90.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reports32f2d806-ee84-4643-b2a7-7a7526a82f90.tmp
                                                                                                                                                                  • Size 2B
                                                                                                                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Preferences
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                  • Size 11KB
                                                                                                                                                                  • SHA256 60b426df05d6f18b31761cbdade324f9bfb2c8d0a192050a89c9c36eafda31bb
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Preferences
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                  • Size 15KB
                                                                                                                                                                  • SHA256 7b176790be689934ad6afd14a0bf8ab26802542be72ea8c2e0faf00f861436e2
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Preferences20ce2408-f20c-41b9-bfeb-ace448640f56.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences20ce2408-f20c-41b9-bfeb-ace448640f56.tmp
                                                                                                                                                                  • Size 15KB
                                                                                                                                                                  • SHA256 d0001a7c3eb6c07afb867aa68d2627c6893c969994d4813fd735a2c098b6f5c5
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Preferences8b9532c5-3343-4588-bd98-b87cd035026e.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences8b9532c5-3343-4588-bd98-b87cd035026e.tmp
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 bc034d974659c670ecd3236653d426db49936b463a915522b39da9850bbe4a19
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Secure Preferences
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                  • Size 112KB
                                                                                                                                                                  • SHA256 2abc0edbcd7190579d2660a5f1ee259f729f0d437fae607a6c2ced11d2cf304e
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Secure Preferences
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                  • Size 85KB
                                                                                                                                                                  • SHA256 8f98b4effb736d506bf94b179539fb3629a99a44db27b6634e5650ded85630d2
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Secure Preferences
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                  • Size 85KB
                                                                                                                                                                  • SHA256 d0a28bb8dd42d89e6bbde0eb1a6bc4d5e3cb0adc681b133e84f9cec5823b8cef
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  195af26b-3f53-4eee-9db5-3cf4b2440886.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\195af26b-3f53-4eee-9db5-3cf4b2440886.tmp
                                                                                                                                                                  • Size 72B
                                                                                                                                                                  • SHA256 c6cfe9eefac91602db5dac9e079dd490df3554a2f7f3d51ebec83ab17bbf9bcf
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                  • Size 216B
                                                                                                                                                                  • SHA256 33662170e1f011a77577c6485796eb7a2ad92560ae449bb5746d1825c6da8393
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  the-real-index
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                  • Size 120B
                                                                                                                                                                  • SHA256 39c16f960e6530977b3d079148ea66f1fc827aacddd48dead6d267bd760a595e
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  31619087-d90d-4dc3-9eb6-9da0ec0a4189.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\31619087-d90d-4dc3-9eb6-9da0ec0a4189.tmp
                                                                                                                                                                  • Size 381B
                                                                                                                                                                  • SHA256 d94e63971dc04dd619690f0f6329b3c228bdf21734c815acea5f0cbdca588fe2
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  3b44a14c-4c7d-4917-b16f-251812606740.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\3b44a14c-4c7d-4917-b16f-251812606740.tmp
                                                                                                                                                                  • Size 381B
                                                                                                                                                                  • SHA256 8a80e840a7e2bfaaf162a38427a7d81586ac55b11a6cea22c44c6290a130968e
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  daa38300-8f3d-45c9-915e-49c0c181ec21.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\daa38300-8f3d-45c9-915e-49c0c181ec21.tmp
                                                                                                                                                                  • Size 381B
                                                                                                                                                                  • SHA256 f1f2ab194879505cad2790df1cf7de1f8f315b5ce6881c370778e8dd1b2c65ae
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 c77c47cc25bb3fa5f5e6e311c1284983573c73f332b24a8343d0e2695c7207e8
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 9c8d206e4cd6c2830f43fffcf002a8e7f85c33a135364c13cbae02b0088e9d3f
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 8d35dabe148d7160303b115c51a885c37b49cb9a72dd2983fd24e5fcf37b8044
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 6df54dcf0fd2598ae145a404531666e31e236e2d075357fa8df55e0abf1c6ffd
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Size 493B
                                                                                                                                                                  • SHA256 2da484bca371bd34a5648fee96fc37cdade51e351c3397fff2db44159ca4a51d
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Size 621B
                                                                                                                                                                  • SHA256 99b1c2621d508898bb4c3e0f7a4cc580992b490634d1eed227eeb0e00dc89844
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Size 781B
                                                                                                                                                                  • SHA256 4145fd3260f0dcfd3b20c991bc9517eb987ed436c5427ee640ce529395c8d1c7
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Size 941B
                                                                                                                                                                  • SHA256 de8b2c1bd9fad8387c102155dc4273633d072e921814d8691ff30c64a34db358
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Size 973B
                                                                                                                                                                  • SHA256 190f110e99e212f3da005b427527a701cfd3001923b3becbd8a3aaf005cbadbf
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 54ad919a39198cfc765cb52b13f427267544b4c8f7bf3ea4c0d1f2159be8a20b
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw87f0ce1d-e06b-4f3c-bdde-574932d5384a.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_444dfca3-5dee-4fa2-8c64-b5b38a93bfec.raw87f0ce1d-e06b-4f3c-bdde-574932d5384a.tmp
                                                                                                                                                                  • Size 973B
                                                                                                                                                                  • SHA256 d356fafe29ee30a6e121f57c0a495463b895a737802af95f87e50081a86afc52
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_9863bbac-a68e-43ce-aa9b-f270ad8901a1.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9863bbac-a68e-43ce-aa9b-f270ad8901a1.raw
                                                                                                                                                                  • Size 493B
                                                                                                                                                                  • SHA256 e922f3c84933ce1967b8b64d64b25d5d78e0d86e701ae20b7e9862b1bbc7b68c
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_9863bbac-a68e-43ce-aa9b-f270ad8901a1.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9863bbac-a68e-43ce-aa9b-f270ad8901a1.raw
                                                                                                                                                                  • Size 621B
                                                                                                                                                                  • SHA256 83e07eb90b617678d9bb4e43e47a66f745dd5bad26fc61bdbe8d9e93caa749f5
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_9863bbac-a68e-43ce-aa9b-f270ad8901a1.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9863bbac-a68e-43ce-aa9b-f270ad8901a1.raw
                                                                                                                                                                  • Size 845B
                                                                                                                                                                  • SHA256 968dfb5b2dbbb6b2c1107e468e38ce5f4b842cc28d8e5fded1b66d87bb28631c
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_9863bbac-a68e-43ce-aa9b-f270ad8901a1.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9863bbac-a68e-43ce-aa9b-f270ad8901a1.raw
                                                                                                                                                                  • Size 637B
                                                                                                                                                                  • SHA256 9bdf403ae1390f019bbf6573999e77eadd9dbf894296235b1acd6d1e0022080a
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_9863bbac-a68e-43ce-aa9b-f270ad8901a1.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9863bbac-a68e-43ce-aa9b-f270ad8901a1.raw
                                                                                                                                                                  • Size 653B
                                                                                                                                                                  • SHA256 91c4e9c261cf83e573e59f4bf54b9dda3c9690d3fe82233c709d307212e3465d
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_9863bbac-a68e-43ce-aa9b-f270ad8901a1.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9863bbac-a68e-43ce-aa9b-f270ad8901a1.raw
                                                                                                                                                                  • Size 813B
                                                                                                                                                                  • SHA256 d6ac539cb1988dad6c2d3243f187159221c4d198c8f3d7861e2cd8ca76394ef5
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_9863bbac-a68e-43ce-aa9b-f270ad8901a1.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_9863bbac-a68e-43ce-aa9b-f270ad8901a1.raw
                                                                                                                                                                  • Size 637B
                                                                                                                                                                  • SHA256 37fb7c2f9d7c4fc28c33f857b68f369ef62a80e7aa205dd9047658357fe9b429
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 11KB
                                                                                                                                                                  • SHA256 02198052b36ad2de7001d20f6d8de59c33ca4bd0bbae91be66b206b6f162044b
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 3726445b15e3b641a1edb4ecee97222c27f9b799dc56156b3034ddc740f2e39c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 1d0b65acd81049a7feec8ef2f91ba54cd6d835508104ebd9b89194ee6331756e
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 9f45e3110adad67b5e9cbe308f92a2f91ee581279347111a4b898cb39aa8210a
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 0b7f8ea89b4ac64389f1b40d17447328c5d5d95b418d03c48e6ee378bebefc29
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 6KB
                                                                                                                                                                  • SHA256 40569a0269c5744e2877849286a9a7a7b29fc25e3f440af527f7736dfc648168
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 e16f2a5edde6c0fae5daa32c95280a56bafdddce9b286ab97c7d8a986ea28b33
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 be5d7165229a3f7c96e59c20d232eed3e01c09ce547764f235ad3896d94dc993
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 76e9b122fb99c7b6ab2bd78943f1b6cfe4e705d813d50261c466e53b4c1394f4
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 961c7845b41adb4b4d44175d5a5446745d2f1860f1ad9618f09bf7408e53b4c5
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 4d44634ea387f2a708386696e6ca7d411b4b624ecf0d3e0b44570b9ff7b52ffb
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 7e7611d9ea8427f8a9614b999a0fe8a449e4fff7a70f34cccc4e170af534c4d2
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 8b19881d328f6988fb028b4b119cd29d3de8cc0b87e49212c09c79df82e5e2ce
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 ad1dd7307a96600ea5b87850681a748f9e6bdfac73ccd784aa0f6831012f4e08
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 181b2655c16ae1f83ebc2b48f0a796c7d66703911cbabc4d8cb590fa2e3046a8
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 18a01fd82b678240333fff88cd7be1533ae2003b930fe534bd36a2669d1a5555
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 ceae1ea19e75d30cc19c88c473b3d75dbd4b55db98f3edf9063e740d66be10bb
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 368aca68c5520bbdc8e7e7fc2f54ba5952175ac7a2468e80ba43d0d9fab56537
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 19e4eb9287adb99ebfd7c0f4e6185e79bb60ba97a2cdc264cca53dbd2671dcda
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 11KB
                                                                                                                                                                  • SHA256 d267893b2938d0f865ba36f5ac6ec457d2d05adf0a51c8dfa9eb1173192c5cb2
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 493B
                                                                                                                                                                  • SHA256 9b166a151e5ec24e745053b8ebf5c518ec98eb40691ce690ea6d7c2589529a82
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 13699d7591347f0e26d0c2c81df411dae22514b24b50e95ea78a1acf58748ed4
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 9ace18233655f3eff382c8093140e4488a87e1528bc299772e657d74ac320e44
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 13ecb3ad3418cb230d4208ad96c507a434309aef61d85a2796acc4163e001371
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 9aa4c3e53c729e62be3b7b3ccc10cdd8e6785f40651ae10db0090ef182cdc1b0
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 18abb36e97511f62c89342db4f311b1599398e3dc46c1ef940b17beca5be4570
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 fd2ffe236c2fed8b981593e98df79be03649cfa0f1f388a6c1754d17785e61ea
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 11KB
                                                                                                                                                                  • SHA256 65c425e255db900b32e6787a68bea193535520fb7d5dfb0b6f682d9d75feb0f9
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 11KB
                                                                                                                                                                  • SHA256 da77acd6fb635cad6f0d3f42ba5274e52c30bd792bba38e372cde792e59daad8
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 2846241ce50a569d315a1664b7a945051b1756a95e58ed01c46f7d49435e5642
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 2901e12c6f2246dbed2809de114e7dcd660cbcab9bcb62913d53a14aecde64ff
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 e8e5c12c4d95a715aa5dbc9179f2cccf84d75223a986d98ad8b2d9ef430c0c03
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 11KB
                                                                                                                                                                  • SHA256 0f0011cd9d447d0104ae575e131856ebcd2a30d627e4084bd14ad098bd978b66
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 6KB
                                                                                                                                                                  • SHA256 f1ccb2d091e069a71d4ca56a7377ed98ea27e8590f3710e4e99c1dd7fcf5b671
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 d583473a8c04239d0a883cdcb835ace81da2485871d956b361b0fcce8696f540
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 03c2bed11b3de9575faf517ab10f0d62f34b31168dcea8dc39d5db737ea4423f
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 788bcf91faffecab63c41e3f51cb42c35124e8004bb1bc8569f2985ef9ddacf0
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 7KB
                                                                                                                                                                  • SHA256 ac541031e5c4daf4852deff7adfb4ae3d4c901e79bc6cff9d4b242ebe6947a5c
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 7KB
                                                                                                                                                                  • SHA256 6a965de67d24347b829c0132bf17ca0259d726906dfd0f71ddfa63dca2b82d89
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 621B
                                                                                                                                                                  • SHA256 78fea9bd82a95df741f7e56d1405d8d3f9f0de91768b52b1b445fa0a2fe247ab
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 749B
                                                                                                                                                                  • SHA256 d50bf6c4931680b15521c798d57c5e4307e477499413a5ca0ff537a2d7eb3231
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 973B
                                                                                                                                                                  • SHA256 ee2684df39e8188977ae98f7337d95613414c4ccaa37939e62cc84f615b6e216
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 cf1209230f56bbffc9b4900d3f90d8808c4da037aa7c63634ff3724995659ce1
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 822613392daa64de8ebd59bf29c7e711241e8707cc1f5827ba261cbaada05d7d
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 36c84ea05b8fff47db7220a32a2029f38f61bb94292593416f495616e2b0c4cc
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 a77dae35c50a2ffb763a772d81f5b5eae75446dcdd8dc646a32904af04e970f1
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 9d9e32886dff9abed02b52026406f17fcc8803c4c79adfea432aea1ffd7c76f3
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 dffaaacd932393b52dcc33237f7f99804b8c4a06afe66f6b8166abe6d8f5ebec
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 09e2ff12702eaf24687edc6a68f8f627e8641db4942bb4cd3be3cb8919dde07d
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 033920125378b2f1a7e38d4e9d2a36d816399d246893ef9f51a934ac5a70a8e8
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 77d6e89b47a19f8bd39f6fc38f0786c8e13559cbb90a6a6b5fb61d9ba8880059
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 10KB
                                                                                                                                                                  • SHA256 61495f1ad08238c3ee62d6cd8684c74717ce36234ad842a7104924cbe806e426
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 7KB
                                                                                                                                                                  • SHA256 470a4287ae55136a4d7d7a890e38d7ec994eebe74e451c6eceb024cd2e85c017
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 925B
                                                                                                                                                                  • SHA256 9030f1053f05780d736b776491f7ea4fb68a04df76419b5ecd4c0fa93c5f7933
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 de9772b9a3e038e5ee89b8da2f0c6c2e4a5d95db7d00e497436ae06d6f1423a8
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 e9b40a06170b540375cfbd81faa881c8e8fd22759d414e09c51182b4f16d31e7
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 fea032598181ef6c469f04b8a890bc0641dfc243cc3801f64b3b178757a01367
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 12KB
                                                                                                                                                                  • SHA256 4fef823f91103092d9b0d94a31ec6b51e4cfe63d7c66da05101e3ca2b0d31de3
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 e25f47a29fd73820fdda98ce4e69599516ae3f1159a2412e86c0f2536283945f
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 96f833e9fe7b247cafd2d5c829dde0d0783f246d4aa146dbc549dfff3e14a453
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 c899a343e7db59d5f16cf35f86107b5cfac898cfb9d41bcbd38534c16716b229
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 bebc2713341f48208cc9b74aa489059885059fddcccf65adadbb6c36948ece6b
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 8KB
                                                                                                                                                                  • SHA256 ab6d4eb644140b7dcb5cd6d303ad5bf5212808f1051d94c348ad2cf000e2c232
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 9KB
                                                                                                                                                                  • SHA256 85024e429c564ae4e5eafd825c98c1f66517f2a0ecf6129c891c158e32eb0ee9
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 11KB
                                                                                                                                                                  • SHA256 53c148d0e1f10e05a5fc98fc644b39552441229dd6438673bee64a66025e9fbb
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f73e4f78-3e02-4937-93d2-7e71166aa0a4.raw
                                                                                                                                                                  • Size 11KB
                                                                                                                                                                  • SHA256 34eb0b0cf2f53ab6c998d7637ecfd3fc0a563473644f6d687192a66223dcebc7
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  d0e39042-c2c0-4670-909f-0d29b76a5152.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\d0e39042-c2c0-4670-909f-0d29b76a5152.tmp
                                                                                                                                                                  • Size 203B
                                                                                                                                                                  • SHA256 36e230c19575af31c2be997d06a573bb2c22699c3a94de09560a08124a5705ab
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  e0e34718-63a6-49a5-96ed-35e81870fb3d.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\e0e34718-63a6-49a5-96ed-35e81870fb3d.tmp
                                                                                                                                                                  • Size 203B
                                                                                                                                                                  • SHA256 f6172a8288e88cd92ce623585e4fb9ce93aa60041625c7f0b3b39f3618a5f138
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp1772.0.236945657
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1772.0.236945657
                                                                                                                                                                  • Size 265B
                                                                                                                                                                  • SHA256 8b88905066a6a471df6b8e1a4e3cb1e5814d827f17ac78afa3b0eca92932416e
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp1772.0.236945657
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1772.0.236945657
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 b7a8a2fbb24ff39a31534940f681140645410ad30c3da1737164b0e127f95f34
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp1772.0.236945657
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp1772.0.236945657
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 b28fb2964cd4d9a58248eb5b8f25a471a78850dd2a6b2554a56a6590b94b77ca
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.0.1787300497
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.0.1787300497
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 0e8fffc51f0bb48b49498be8bf65fa17dae1464e7bba0a4c2e9e3766b5929486
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.0.1787300497
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.0.1787300497
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 8e19029c12183f3a33f9bc26b750d8c4186661a85045256148f2b0f41897246d
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.0.1787300497
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.0.1787300497
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 a5a390611d931701e80d2211fb5697019a2eb7588f87b4d43e77c948ba89b4ac
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.0.1787300497
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.0.1787300497
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 6df4a5cacfcc0ae713f91df115c119767e8a06e31769382f45ee71f44e310050
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.0.1787300497
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.0.1787300497
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 de898a7aa98051d43525eeedc5be291aedd00f11d3bf23c9fc911b104bcedef8
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.0.1787300497
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.0.1787300497
                                                                                                                                                                  • Size 3KB
                                                                                                                                                                  • SHA256 1cfd528a4face44ff74e9129dea0cf0d9e6ed9521f40ae88927779e2609d309e
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.0.1787300497
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.0.1787300497
                                                                                                                                                                  • Size 561B
                                                                                                                                                                  • SHA256 cc7da42f4ec5c1d87970de495b76b67e69f380464dca09ae0c99da013fa0a352
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.0.1787300497
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.0.1787300497
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 3270f4222c430063c97b933cb4465f18da2407394c1b77cedb8c2c2429140cf5
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.0.1787300497
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.0.1787300497
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 cd8f4fb0204e23faa86152975c186e08abbe406261784f3197caa60e3c5cbe51
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.0.1787300497
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.0.1787300497
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 b6f97b03ec7daafb3e0ec15a5eef6de838b34b00885fc98393c9da6ea7cd7195
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.0.1787300497
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.0.1787300497
                                                                                                                                                                  • Size 499B
                                                                                                                                                                  • SHA256 1da28b5232cc4ef05b12caabca1cb556c36749ddc6e3279f1a4694eb95c74611
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.1.1070546829
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.1.1070546829
                                                                                                                                                                  • Size 883B
                                                                                                                                                                  • SHA256 8536763b5f99c6b733dc81db715a2fbbdf6efbdd297f3211f5d428d1a479b498
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.1.1070546829
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.1.1070546829
                                                                                                                                                                  • Size 974B
                                                                                                                                                                  • SHA256 ea5523de3e89c35442951a0bae5f71b9b7dab769f537115bba7f319b6d8e75b1
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.1.1070546829
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.1.1070546829
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 8f1824796e2b25313c46ecb906220e199bf04527a45e58c26a7ac9c75bbcf2c7
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.1.1070546829
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.1.1070546829
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 4495553dc52480103fcd73ed1d42dafecb39b6621895e10ee75b98878df8411c
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.1.1070546829
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.1.1070546829
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 3ec46c4a348a50c52b8cab04befff272b3de4975b66aa04352f1a6a87e28090f
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.1.1070546829
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.1.1070546829
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 187f192399a61e10559ba8a3e1f50e980fafc292fabeb58803e68975b0466161
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.1.1070546829
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.1.1070546829
                                                                                                                                                                  • Size 200B
                                                                                                                                                                  • SHA256 a6aecf293aad2fb8241c2cb37da969ede859c48c69bd96b3152791ee9cf3c43f
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.1.1070546829
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.1.1070546829
                                                                                                                                                                  • Size 606B
                                                                                                                                                                  • SHA256 d389f6fe9845dd5ef9307528d4ad33bdd96cf1a6a36d8dd8b33aab08dc56591e
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.1.1070546829
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.1.1070546829
                                                                                                                                                                  • Size 693B
                                                                                                                                                                  • SHA256 d4fbad8fee551f1c789ea00377e593f827c79ec5301902e586c61ea1980383fe
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.1.1070546829
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.1.1070546829
                                                                                                                                                                  • Size 787B
                                                                                                                                                                  • SHA256 c7bf597d717fcd974ec5721dc72335bbab91b774a3f87c6ccde340c4f5c91003
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.1.1070546829
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.1.1070546829
                                                                                                                                                                  • Size 418B
                                                                                                                                                                  • SHA256 8d5c005ce2956ee823c14e11895077ca9fec7c0f0c740ca7ac42dce19320edc6
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.1.1070546829
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.1.1070546829
                                                                                                                                                                  • Size 516B
                                                                                                                                                                  • SHA256 53b4b3bbccbc2d62ca15b7dca1590064a86d393162ada598b30b2d93e266b4a3
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.1.1070546829
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.1.1070546829
                                                                                                                                                                  • Size 325B
                                                                                                                                                                  • SHA256 b8897ab5bb8177d895c2870c7fa735ccd6c923c2f861f9bd2f6baf24c4d7434e
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp5624.1.1070546829
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5624.1.1070546829
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 92f128c9934903548a9314b094300254decb6ef563301ddf978a499c7b8ec6fc
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp7148.0.416835118
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7148.0.416835118
                                                                                                                                                                  • Size 265B
                                                                                                                                                                  • SHA256 65fdeb2f7fc16f3b26f38063ee97f9b4bd67ea49e1f57769bff57b83d0f783b9
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp7148.0.416835118
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7148.0.416835118
                                                                                                                                                                  • Size 1KB
                                                                                                                                                                  • SHA256 9c22c3a5674fa6fab38fa3caf5bb212876a7055f83ef8fb533b77e64855a6226
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  ssdfp7148.0.416835118
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7148.0.416835118
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 d7221acd8284a8266bced8b5807f4478485faf717e8145b0c2f542b97c8a5e22
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  suggestions_cache.json6e80f23d-4565-484b-86e8-66ba9af0ff9d.tmp
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json6e80f23d-4565-484b-86e8-66ba9af0ff9d.tmp
                                                                                                                                                                  • Size 652KB
                                                                                                                                                                  • SHA256 27c282f4f0c2cebabd9b26e666e6bbf34c81b583d43136938016ecee68e8cdeb
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  data_1
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                                                                                                                  • Size 264KB
                                                                                                                                                                  • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                  • Size 2KB
                                                                                                                                                                  • SHA256 13bd06a1e35406c417442568befdab315177b2665a20e5b5f683e8f7c47271c3
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  Local State
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                  • Size 3KB
                                                                                                                                                                  • SHA256 799db49e34e86a63b1a52441c99c0109e6fd83636409d1d611e55282e081c6c2
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  VariationsSeedV2
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                                                                                                                  • Size 19B
                                                                                                                                                                  • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  VariationsSeedV2
                                                                                                                                                                  • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2
                                                                                                                                                                  • Size 11B
                                                                                                                                                                  • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                                                                                                                  • MD5 SHA1 SHA512
                                                                                                                                                                  Submit Download

                                                                                                                                                                  opera-one.jpg
                                                                                                                                                                  • Path C:\Windows\SystemTemp\scoped_dir5624_174648927\opera-one.jpg
                                                                                                                                                                  • Size 194KB
                                                                                                                                                                  • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  persona.ini
                                                                                                                                                                  • Path C:\Windows\SystemTemp\scoped_dir5624_174648927\persona.ini
                                                                                                                                                                  • Size 207B
                                                                                                                                                                  • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  opera-one-dark.jpg
                                                                                                                                                                  • Path C:\Windows\SystemTemp\scoped_dir5624_431501194\opera-one-dark.jpg
                                                                                                                                                                  • Size 349KB
                                                                                                                                                                  • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  persona.ini
                                                                                                                                                                  • Path C:\Windows\SystemTemp\scoped_dir5624_431501194\persona.ini
                                                                                                                                                                  • Size 217B
                                                                                                                                                                  • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                                                                                                                                  • MD5 SHA1 SHA512 TLSH
                                                                                                                                                                  Submit Download

                                                                                                                                                                  memory/1388-825-0x000001E648AB0000-0x000001E648D51000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/1552-551-0x00007FFD642F0000-0x00007FFD642F1000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/1552-547-0x00007FFD63950000-0x00007FFD63951000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/1772-1303-0x0000013D9EAE0000-0x0000013D9ED81000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/1772-1302-0x0000013D9EAE0000-0x0000013D9ED81000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/1872-582-0x000002A0C8630000-0x000002A0C88D1000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/1984-418-0x0000021D8C590000-0x0000021D8C831000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/2560-1298-0x000001507E5B0000-0x000001507E851000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/3152-1243-0x0000028BE8440000-0x0000028BE86E1000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/3320-1301-0x00000247B2890000-0x00000247B2B31000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/3504-1788-0x000001DD58A50000-0x000001DD58CF1000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/4244-422-0x000001BF8E780000-0x000001BF8EA21000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/4404-428-0x000001B695530000-0x000001B6957D1000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/4500-2589-0x000001E315DD0000-0x000001E316071000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5516-3090-0x0000025835170000-0x0000025835411000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5624-3093-0x000001E7C6800000-0x000001E7C6AA1000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5624-2282-0x000001E7C6800000-0x000001E7C6AA1000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5820-425-0x0000022723AF0000-0x0000022723D91000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/5864-2588-0x00000208C5400000-0x00000208C56A1000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6312-1770-0x000001589A050000-0x000001589A2F1000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/6804-1786-0x000002968B130000-0x000002968B3D1000-memory.dmp
                                                                                                                                                                  Download

                                                                                                                                                                  memory/7148-1787-0x0000012C61820000-0x0000012C61AC1000-memory.dmp
                                                                                                                                                                  Download