Analysis

  • user interaction
    yes
  • max time kernel
    47s
  • max time network
    90s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/10/2026, 12:59

General

  • Target
    OperaSetup (1).exe
  • Size 3.1MB
  • Sample261003-p8a2sszzf1
  • SHA256 03f56843076bcbf082141a00cbf403ec9edd92eb219506f12efd82f695007df2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Writes a Windows system DLL name to a user directory 2 TTPs 2 IoCs

    A module named after a system DLL outside System32 can be loaded instead of the real one by a program searching that directory.

  • Adds Run key to start application 2 TTPs 3 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 6 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 14 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies registry class 49 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaSetup (1).exe
    "C:\Users\Admin\AppData\Local\Temp\OperaSetup (1).exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4280
    • C:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exe
      C:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exe --server-tracking-blob=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
      2⤵
      • Downloads MZ/PE file
      • Executes dropped EXE
      • Enumerates connected drives
      • Reads the TCP/IP host and domain name from the registry
      • Enumerates system info in registry
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4172
      • C:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x2b8,0x2bc,0x2c0,0x294,0x2c4,0x7ff6056c6998,0x7ff6056c69a8,0x7ff6056c69b8
        3⤵
        • Executes dropped EXE
        PID:4820
      • C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\installer.exe" --version
        3⤵
        • Executes dropped EXE
        PID:3192
      • C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe"
        3⤵
        • Executes dropped EXE
        • Writes a Windows system DLL name to a user directory
        • System Location Discovery: System Language Discovery
        PID:5956
      • C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe
        "C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe" --version
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:916
        • C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xc2c9cc,0xc2c9d8,0xc2c9e4
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:2616
      • C:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exe
        "C:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=4172 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_20261003135939" --session-guid=c9f33cdb-0e0b-46e0-9e0c-4dfcffb94fd7 --server-tracking-blob="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 " --desktopshortcut=1 --wait-for-package --initial-proc-handle=640B000000000000
        3⤵
        • Executes dropped EXE
        • Enumerates connected drives
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:956
        • C:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2c4,0x7ff6056c6998,0x7ff6056c69a8,0x7ff6056c69b8
          4⤵
          • Executes dropped EXE
          PID:5752
        • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe
          "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe" --backend --initial-pid=4172 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391" --session-guid=c9f33cdb-0e0b-46e0-9e0c-4dfcffb94fd7 --server-tracking-blob="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 " --desktopshortcut=1 --install-subfolder=136.0.6008.80
          4⤵
          • Executes dropped EXE
          • Enumerates connected drives
          • Enumerates system info in registry
          • Modifies registry class
          • Suspicious use of WriteProcessMemory
          PID:716
          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe
            C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff67a7b6998,0x7ff67a7b69a8,0x7ff67a7b69b8
            5⤵
            • Executes dropped EXE
            PID:4548
          • C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe
            "C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Writes a Windows system DLL name to a user directory
            • Adds Run key to start application
            • System Location Discovery: System Language Discovery
            • Enumerates system info in registry
            • Modifies Internet Explorer settings
            • Suspicious use of WriteProcessMemory
            PID:4420
            • C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xc2c9cc,0xc2c9d8,0xc2c9e4
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              PID:2920
            • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Suspicious use of WriteProcessMemory
              PID:5088
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xddc9cc,0xddc9d8,0xddc9e4
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:4704
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Reads the TCP/IP host and domain name from the registry
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of SendNotifyMessage
                • Suspicious use of WriteProcessMemory
                PID:4932
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  • Suspicious use of WriteProcessMemory
                  PID:3384
                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd0
                    9⤵
                    • Executes dropped EXE
                    PID:6132
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Enumerates system info in registry
                  • Suspicious use of WriteProcessMemory
                  PID:1504
                  • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd0
                    9⤵
                    • Executes dropped EXE
                    PID:704
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x2a4,0x2a8,0x2ac,0x278,0x2b0,0x687324,0x687330,0x68733c
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Suspicious use of WriteProcessMemory
                  PID:3004
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:5028
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd0
                      10⤵
                      • Executes dropped EXE
                      PID:1848
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:1128
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd0
                      10⤵
                      • Executes dropped EXE
                      PID:4592
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:2864
                    • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x25c,0x27c,0x280,0x260,0x284,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd0
                      10⤵
                      • Executes dropped EXE
                      PID:1388
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\de932af914ba00303d4a2778a383ac9c831101e2.crx"
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • Drops file in Windows directory
            • Reads the TCP/IP host and domain name from the registry
            • Checks processor information in registry
            • Enumerates system info in registry
            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of WriteProcessMemory
            PID:4328
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd0
              6⤵
              • Executes dropped EXE
              PID:2736
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1632,i,7304811176097134773,17691589115277987691,262144 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2128 /prefetch:2
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:2856
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1920,i,11948023410308429888,16979775157798485558,524288 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2156 /prefetch:11
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Reads the TCP/IP host and domain name from the registry
              • System Time Discovery
              • Enumerates system info in registry
              PID:5444
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2388,i,10324095221817730989,14453195123063163900,524288 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3240 /prefetch:13
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5312
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3948,i,3825361056798606205,1838331656618431771,2097152 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=4080 /prefetch:9
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:4876
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3864,i,5602940880229574981,13198583546684147644,524288 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4340 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:2072
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4476,i,15077466680058898252,8251994203525560654,2097152 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4484 /prefetch:9
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:2716
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4756,i,15832371936584868190,15398704682705319817,524288 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4736 /prefetch:12
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:3672
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4924,i,15668670010647653604,10345600028605525916,524288 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4224 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5924
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4936,i,924693326632896556,8018509091441947172,524288 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=1872 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Enumerates system info in registry
              PID:5336
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5324,i,3004906783264634941,453631721661102717,2097152 --field-trial-handle=2132,i,9684198694245875799,7849360014856181189,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2136,i,4402968259446486794,671899980883975990,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5336 /prefetch:1
              6⤵
              • Executes dropped EXE
              PID:6592
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
            5⤵
            • Executes dropped EXE
            • Adds Run key to start application
            • Drops file in Windows directory
            • Reads the TCP/IP host and domain name from the registry
            • Checks processor information in registry
            • Enumerates system info in registry
            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
            • Suspicious use of WriteProcessMemory
            PID:6892
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd0
              6⤵
              • Executes dropped EXE
              PID:6640
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1948,i,5777523596928946237,11200867179947741642,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=3032 /prefetch:11
              6⤵
              • Executes dropped EXE
              • Reads the TCP/IP host and domain name from the registry
              • System Time Discovery
              • Enumerates system info in registry
              PID:7804
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --metrics-shmem-handle=1648,i,4598150277781277194,15264195702495939483,262144 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2208 /prefetch:2
              6⤵
              • Enumerates system info in registry
              PID:7812
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2372,i,8517592080121590518,2880833432628464600,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3328 /prefetch:13
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:7820
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3164,i,15987134912124455377,10604558584636230734,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3380 /prefetch:14
              6⤵
              • Executes dropped EXE
              PID:7848
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3180,i,11252646648864111837,9432887371808318056,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3400 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:7860
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2748,i,10419036182302134426,4377523216449310197,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3360 /prefetch:14
              6⤵
              • Executes dropped EXE
              PID:7840
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3192,i,14587351407228728669,4847095971712968320,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3420 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:7864
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3204,i,10751218066607964286,3233921085914957811,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3352 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:7876
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3216,i,3103944978011890825,12316444760856058725,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3452 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:7888
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3292,i,11509407287623520209,13757471960110122271,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3512 /prefetch:1
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:7912
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3228,i,1460909867561331010,17457943254252972652,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3492 /prefetch:14
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:7892
            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_gx_splash.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
              6⤵
              • Modifies registry class
              PID:6176
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4724,i,1768973900216930750,3907609076067828126,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4796 /prefetch:9
              6⤵
                PID:6608
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4980,i,4956028789627412546,4129643704031130609,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4984 /prefetch:1
                6⤵
                  PID:1692
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5280,i,9965205306251424163,10023979060743130774,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5284 /prefetch:1
                  6⤵
                    PID:6772
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5324,i,2591169376527072688,284650880346981923,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5448 /prefetch:1
                    6⤵
                      PID:6760
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5992,i,10415957084834926690,16356655067052155029,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=5996 /prefetch:9
                      6⤵
                        PID:6876
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6852,i,858395572383914189,11894882962846113011,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6912 /prefetch:9
                        6⤵
                          PID:7152
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6572,i,14975910807665879051,721337612603470851,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=7136 /prefetch:9
                          6⤵
                            PID:7268
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2408,i,6204175210405896040,8037117610842950423,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6720 /prefetch:12
                            6⤵
                              PID:3156
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7372,i,11542364404509789758,7509678997207376652,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7388 /prefetch:1
                              6⤵
                                PID:4312
                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                6⤵
                                  PID:4876
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                    C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x274,0x29c,0x2a0,0x298,0x2a4,0x7ff7fd7d5598,0x7ff7fd7d55a8,0x7ff7fd7d55b8
                                    7⤵
                                      PID:7588
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7904,i,11396678792815973740,1914879084312205487,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7900 /prefetch:14
                                    6⤵
                                      PID:7488
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7960,i,11397960382322654,7425430209453732359,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7944 /prefetch:14
                                      6⤵
                                        PID:7948
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8264,i,13015626065801948448,16064523855779511784,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=8328 /prefetch:14
                                        6⤵
                                          PID:6932
                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8280,i,4601853514788482703,15047974841615991647,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8368 /prefetch:14
                                          6⤵
                                            PID:2172
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8272,i,10923435159307627076,1719652998517247109,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=8348 /prefetch:14
                                            6⤵
                                              PID:1212
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8252,i,18405435221113819001,8586095219578835782,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=8308 /prefetch:14
                                              6⤵
                                                PID:6280
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8288,i,1963265584374945184,673251503520978872,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8388 /prefetch:14
                                                6⤵
                                                  PID:7040
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8296,i,505998563503709207,727091367304873068,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8408 /prefetch:14
                                                  6⤵
                                                    PID:3864
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9076,i,4388537501529413108,8611306849704778458,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=9084 /prefetch:14
                                                    6⤵
                                                      PID:6420
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9104,i,14562594310949782935,5938597539896386792,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=9220 /prefetch:14
                                                      6⤵
                                                        PID:8068
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9240,i,4532252153864247500,7349619098245690319,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=9244 /prefetch:14
                                                        6⤵
                                                          PID:6928
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9496,i,6222679771774131652,1002536032844489137,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=9364 /prefetch:14
                                                          6⤵
                                                            PID:7060
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9504,i,14669335833065139328,7718968854351105654,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9516 /prefetch:14
                                                            6⤵
                                                              PID:7220
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9552,i,14517123465373535093,16010744182468840381,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9580 /prefetch:14
                                                              6⤵
                                                                PID:6032
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9904,i,16348465978889714416,18042552246301467009,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9928 /prefetch:14
                                                                6⤵
                                                                  PID:6592
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9916,i,7065540596482919614,16605505599724817180,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=10056 /prefetch:14
                                                                  6⤵
                                                                    PID:7100
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10208,i,10776241461265588045,7345790148570179606,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=10200 /prefetch:14
                                                                    6⤵
                                                                      PID:7248
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10380,i,124610368976544443,10669401003272240992,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10396 /prefetch:14
                                                                      6⤵
                                                                        PID:6252
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --metrics-shmem-handle=10424,i,3332038473920116721,9037755102076424274,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=10436 /prefetch:9
                                                                        6⤵
                                                                          PID:6168
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10512,i,17235373040120550088,14792186045642096524,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10448 /prefetch:14
                                                                          6⤵
                                                                            PID:4156
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10864,i,5138890428195405910,3002813144394239873,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10856 /prefetch:14
                                                                            6⤵
                                                                              PID:4812
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11028,i,7284922990089374696,15078030772453025055,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=11036 /prefetch:14
                                                                              6⤵
                                                                                PID:5908
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11200,i,879877228017589809,5940453319506729256,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11208 /prefetch:14
                                                                                6⤵
                                                                                  PID:3808
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11356,i,7037540334790398122,9247811979540793342,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11384 /prefetch:14
                                                                                  6⤵
                                                                                    PID:7940
                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11520,i,11985948187613929464,10181627409688145267,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11528 /prefetch:14
                                                                                    6⤵
                                                                                      PID:8020
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=7956,i,18431865019143076208,8152948383299870651,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=8120 /prefetch:1
                                                                                      6⤵
                                                                                        PID:6924
                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10004,i,12409350797609451193,9235323187056316383,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=9996 /prefetch:14
                                                                                        6⤵
                                                                                          PID:3184
                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4212,i,4350202752044863343,16438707503478830603,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=4248 /prefetch:14
                                                                                          6⤵
                                                                                            PID:6500
                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4112,i,1261273099817953584,17483844653370487786,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=3460 /prefetch:14
                                                                                            6⤵
                                                                                              PID:8172
                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9188,i,16206892283426293523,10523976731825385697,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=9140 /prefetch:14
                                                                                              6⤵
                                                                                                PID:7264
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9156,i,3980872539415131623,16041151718031973595,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=9132 /prefetch:14
                                                                                                6⤵
                                                                                                  PID:6740
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11460,i,359536481435912026,1876733910371890399,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=10716 /prefetch:14
                                                                                                  6⤵
                                                                                                    PID:4248
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11428,i,5841411475079688343,1231655411300267763,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=10776 /prefetch:14
                                                                                                    6⤵
                                                                                                      PID:7088
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=3360,i,5578280632465089580,13975951946185995032,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=3512 /prefetch:9
                                                                                                      6⤵
                                                                                                        PID:6280
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3160,i,6039872578216249668,11879479662021833514,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=3172 /prefetch:14
                                                                                                        6⤵
                                                                                                          PID:7256
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=9764,i,16257269648907685085,11965566527107230274,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=8092 /prefetch:9
                                                                                                          6⤵
                                                                                                            PID:4476
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=8284,i,14448055017928109259,744768237607031457,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8772 /prefetch:9
                                                                                                            6⤵
                                                                                                              PID:8096
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4800,i,16905886169453917771,1333309757366237534,524288 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=9836 /prefetch:14
                                                                                                              6⤵
                                                                                                                PID:5696
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:acceptable-ads=off --with-feature:address-bar-dropdown-keyword-ads-reduced=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-restore-attribution=on --with-feature:continue-on-support-with-booking=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=off --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-booking-attributions=off --with-feature:side-panel-api=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:startpage-sync-banner-ref=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=11492,i,14666437525954302419,14737502922432567813,2097152 --field-trial-handle=2212,i,6952594733133222635,11813570618308338609,262144 --enable-features=AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,ExternalDecoderInAudioFileReader,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=BrowserInitiatedAutomaticPictureInPicture,GcmStoreSelfRepair,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2216,i,4535099841133614019,2099309094797110680,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=10260 /prefetch:1
                                                                                                                6⤵
                                                                                                                  PID:7368
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                                                                                                        1⤵
                                                                                                        • Executes dropped EXE
                                                                                                        • Loads dropped DLL
                                                                                                        • Reads the TCP/IP host and domain name from the registry
                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                        • Suspicious use of FindShellTrayWindow
                                                                                                        • Suspicious use of SendNotifyMessage
                                                                                                        • Suspicious use of WriteProcessMemory
                                                                                                        PID:5692
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                          2⤵
                                                                                                          • Executes dropped EXE
                                                                                                          • Loads dropped DLL
                                                                                                          • Enumerates system info in registry
                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                          PID:1488
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd0
                                                                                                            3⤵
                                                                                                            • Executes dropped EXE
                                                                                                            PID:3988
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                          2⤵
                                                                                                          • Executes dropped EXE
                                                                                                          • Loads dropped DLL
                                                                                                          • Enumerates system info in registry
                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                          PID:5648
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x278,0x27c,0x280,0x214,0x284,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd0
                                                                                                            3⤵
                                                                                                            • Executes dropped EXE
                                                                                                            PID:3544
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.52 --initial-client-data=0x294,0x2a4,0x2a8,0x258,0x2ac,0x687324,0x687330,0x68733c
                                                                                                          2⤵
                                                                                                          • Executes dropped EXE
                                                                                                          • Loads dropped DLL
                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                          PID:1196
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                            3⤵
                                                                                                            • Executes dropped EXE
                                                                                                            • Loads dropped DLL
                                                                                                            • Enumerates system info in registry
                                                                                                            • Suspicious use of WriteProcessMemory
                                                                                                            PID:3640
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                                                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x288,0x28c,0x290,0x284,0x294,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd0
                                                                                                              4⤵
                                                                                                              • Executes dropped EXE
                                                                                                              PID:204
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                            3⤵
                                                                                                            • Executes dropped EXE
                                                                                                            • Loads dropped DLL
                                                                                                            • Enumerates system info in registry
                                                                                                            • Suspicious use of WriteProcessMemory
                                                                                                            PID:1072
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                                                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd0
                                                                                                              4⤵
                                                                                                              • Executes dropped EXE
                                                                                                              PID:5572
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                            3⤵
                                                                                                            • Executes dropped EXE
                                                                                                            • Loads dropped DLL
                                                                                                            • Enumerates system info in registry
                                                                                                            • Suspicious use of WriteProcessMemory
                                                                                                            PID:480
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                                                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x27c,0x280,0x284,0x278,0x288,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd0
                                                                                                              4⤵
                                                                                                              • Executes dropped EXE
                                                                                                              PID:2744
                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                        C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                        1⤵
                                                                                                          PID:5640
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                                                                                                          1⤵
                                                                                                          • Executes dropped EXE
                                                                                                          • Loads dropped DLL
                                                                                                          • Enumerates system info in registry
                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                          PID:3392
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe
                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x7ffd079ebdb0,0x7ffd079ebdc0,0x7ffd079ebdd0
                                                                                                            2⤵
                                                                                                            • Executes dropped EXE
                                                                                                            PID:6360
                                                                                                        • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                          C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                          1⤵
                                                                                                            PID:1100
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                                                            1⤵
                                                                                                              PID:4404
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=136.0.6008.80 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff7fd7d5598,0x7ff7fd7d55a8,0x7ff7fd7d55b8
                                                                                                                2⤵
                                                                                                                  PID:7932
                                                                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                                                                                  2⤵
                                                                                                                    PID:7940
                                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                                  C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                                                                                  1⤵
                                                                                                                    PID:7460

                                                                                                                  Network

                                                                                                                        MITRE ATT&CK Enterprise v16

                                                                                                                        Replay Monitor

                                                                                                                        Loading Replay Monitor...

                                                                                                                        Downloads

                                                                                                                        snapshot-new.baf

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\No_Vary_Search\snapshot-new.baf
                                                                                                                        • Size 20B
                                                                                                                        • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        f_000001

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                                                                                                        • Size 163KB
                                                                                                                        • SHA256 60f4451ee66b7a4bbd45643582362d23878aeddd735f2be2e4462d84f7ace20a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        136.0.6008.80.manifest

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\136.0.6008.80.manifest
                                                                                                                        • Size 225B
                                                                                                                        • SHA256 0b42e2f6e44cb617486730d36045d7eafdb43c83e473dc2446fc266e3091fd12
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        150x150Logo.scale-100.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-100.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        150x150Logo.scale-100_contrast-white.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-100_contrast-white.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        150x150Logo.scale-140.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-140.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        150x150Logo.scale-140_contrast-white.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-140_contrast-white.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        150x150Logo.scale-180.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-180.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        150x150Logo.scale-180_contrast-white.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-180_contrast-white.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        150x150Logo.scale-80.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-80.png
                                                                                                                        • Size 827B
                                                                                                                        • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        150x150Logo.scale-80_contrast-white.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\150x150Logo.scale-80_contrast-white.png
                                                                                                                        • Size 799B
                                                                                                                        • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        70x70Logo.scale-100.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-100.png
                                                                                                                        • Size 781B
                                                                                                                        • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        70x70Logo.scale-100_contrast-white.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-100_contrast-white.png
                                                                                                                        • Size 752B
                                                                                                                        • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        70x70Logo.scale-140.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-140.png
                                                                                                                        • Size 991B
                                                                                                                        • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        70x70Logo.scale-140_contrast-white.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-140_contrast-white.png
                                                                                                                        • Size 865B
                                                                                                                        • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        70x70Logo.scale-180.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-180.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        70x70Logo.scale-180_contrast-white.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-180_contrast-white.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        70x70Logo.scale-80.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-80.png
                                                                                                                        • Size 590B
                                                                                                                        • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        70x70Logo.scale-80_contrast-white.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\Assets\70x70Logo.scale-80_contrast-white.png
                                                                                                                        • Size 519B
                                                                                                                        • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        assistant_package

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\assistant_package
                                                                                                                        • Size 3.6MB
                                                                                                                        • SHA256 48fb4ec141322aa1e753876ce4105ac61735f7c0d744a73ff4a209e09ab2b023
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        d3dcompiler_47.dll

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\d3dcompiler_47.dll
                                                                                                                        • Size 4.5MB
                                                                                                                        • SHA256 c0e3f27b85a7717c807d862b7e64b1599a6a8827cc47d671856ce03a3b04fa44
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        dxcompiler.dll

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\dxcompiler.dll
                                                                                                                        • Size 24.6MB
                                                                                                                        • SHA256 3d67684140102197b12b6748e24ba4cd33af2e14876eb981bfd0c24a2c6ac569
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        dxil.dll

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\dxil.dll
                                                                                                                        • Size 1.5MB
                                                                                                                        • SHA256 ba28de1e6e486ab1ad22e6a2eab96bbb7c34a251134f4aab17013571b1245dfd
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        files_list

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\files_list
                                                                                                                        • Size 6KB
                                                                                                                        • SHA256 025d2bcd28ea1b90db693e54070ea99536e11ca16933896673db16bf498ece34
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        headless_command_resources.pak

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\headless_command_resources.pak
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 90e398ef08a0178d1efd373addb5070a551011be8b9d27fcc2f234e430a8ad98
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        icudtl.dat

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\icudtl.dat
                                                                                                                        • Size 10.4MB
                                                                                                                        • SHA256 f11071c692e85689891070cb6f68120dc1a49941325325f7e5b017af42483e72
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        installer.exe

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer.exe
                                                                                                                        • Size 8.3MB
                                                                                                                        • SHA256 a49318e66f5c3d66c8e2c09f0879eafb87f8d3c03152db579baafd5e5a744279
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        installer_helper_64.exe

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\installer_helper_64.exe
                                                                                                                        • Size 601KB
                                                                                                                        • SHA256 3701dd526b94855901ed47b4cc0ddd7810af5eac7aceb43fd8a4fef2fac1b4cc
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        libEGL.dll

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\libEGL.dll
                                                                                                                        • Size 460KB
                                                                                                                        • SHA256 9a596bc1cae71bf1a53d83316a9e23cdf61283f160b227267dc6364ff0f269ce
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        libGLESv2.dll

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\libGLESv2.dll
                                                                                                                        • Size 460KB
                                                                                                                        • SHA256 e8eb8bf566654d5d6afb83ecfc99900381a7297d8e45f1c9fcb1a776b82a0b56
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        bg.pak

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\bg.pak
                                                                                                                        • Size 1021KB
                                                                                                                        • SHA256 7958eea00f4ef14a9b3a9021b87ae4cdace36ca171d6487e09427c980925066a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        bn.pak

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\bn.pak
                                                                                                                        • Size 1.3MB
                                                                                                                        • SHA256 6307636ac68ea9742dba9dcafd1a6cba2c086be46c25fc10c9392a083f67a763
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        ca.pak

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\ca.pak
                                                                                                                        • Size 642KB
                                                                                                                        • SHA256 0cb115bf30541172098fb7a542713d2a86607e1c9f6c36e459015f0b2cc2876c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        cs.pak

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\cs.pak
                                                                                                                        • Size 641KB
                                                                                                                        • SHA256 b8a82ad00c2a033704cf0a9b6a20d4c48f61cab7d6fafd60d5ed7120946d0a64
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        da.pak

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\da.pak
                                                                                                                        • Size 590KB
                                                                                                                        • SHA256 1d767d2231eeaf346ee7d5eafceaef5884df41666cafa057ec9784da278a75c1
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        de.pak

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\de.pak
                                                                                                                        • Size 639KB
                                                                                                                        • SHA256 ed7fd31b1e80c5de13e985a0c15becf8c99f6bc153891c853e144a05b1bf603f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        el.pak

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\el.pak
                                                                                                                        • Size 1.1MB
                                                                                                                        • SHA256 fa8f4b42f21b74e386c88f66aa6802076e78da4e442fd74d875cbccd6af00419
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        en-GB.pak

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\en-GB.pak
                                                                                                                        • Size 518KB
                                                                                                                        • SHA256 6f735948c21e15f796292e92dda0f4820982774f9b3adfd31a6a3c11284783fc
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        en-US.pak

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\en-US.pak
                                                                                                                        • Size 521KB
                                                                                                                        • SHA256 43d287ec974b976f98ebc934b980e24628da839fea1fe53f61977420367a7501
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        es-419.pak

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\es-419.pak
                                                                                                                        • Size 630KB
                                                                                                                        • SHA256 7f07e8900a74b37f8032067b09648ac9f23d4f70c545411c95a146077fa69b41
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        es.pak

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\es.pak
                                                                                                                        • Size 624KB
                                                                                                                        • SHA256 6b27fca44e34f57a258f3e16f53f59bde2604a46874382b314d31a53f1b542ff
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        fi.pak

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\fi.pak
                                                                                                                        • Size 586KB
                                                                                                                        • SHA256 483d5fd39ac54057a9fa514982089e6ab36727f17373e5b709b232b1debcd2ed
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        fil.pak

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\136.0.6008.80\localization\fil.pak
                                                                                                                        • Size 655KB
                                                                                                                        • SHA256 52f48e2ca2a09da4ae293f4b6b89e7cd356a9a30ba9e6fcab5711c675f5dcccc
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        installer_prefs.json2f9725cf-3024-4c66-9663-954431dc6d4b.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json2f9725cf-3024-4c66-9663-954431dc6d4b.tmp
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 8d5c72c2de74efdf173d828214e78c0e6f190baf3d26de248b0386fc9e089c67
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        Opera Browser.lnk

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\Opera Browser.lnk
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 dd42de2e08e58aba64f0b6c1c9b11ac2161598ab7c494e64e3f12a5a006d917f
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        Assistant_136.0.6008.52_Setup.exe_sfx.exe

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\Assistant_136.0.6008.52_Setup.exe_sfx.exe
                                                                                                                        • Size 2.9MB
                                                                                                                        • SHA256 30786977e61add36f7c641facfb7fce1b2ec7c2a0a7e055a172f127a68788556
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        assistant_installer.exe

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\assistant_installer.exe
                                                                                                                        • Size 2.4MB
                                                                                                                        • SHA256 e8dce277d6edb918499526fadba9902e317496c2af077219f263a7a643467824
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        dbgcore.DLL

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\dbgcore.DLL
                                                                                                                        • Size 196KB
                                                                                                                        • SHA256 c16220edd3787da33dbd3ac2fcbec7de6a13e2baf14ae6105bba68d4efd83628
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        dbghelp.dll

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\assistant\dbghelp.dll
                                                                                                                        • Size 1.8MB
                                                                                                                        • SHA256 990b13e88b4a9985eb5c596078e2ec26a0edcc22169dd71f8a84c7943005306c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        de932af914ba00303d4a2778a383ac9c831101e2.crx

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                                                                        • Size 4.6MB
                                                                                                                        • SHA256 e81986014a4fb55c0aa220745d2433c51ad29166b32693de8911784dd3920584
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        installer_prefs_include.json

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\installer_prefs_include.json
                                                                                                                        • Size 1015B
                                                                                                                        • SHA256 3e1594825224f6cb05d2f58e81c72f4ebcf85451ed5ac1b77f74123712a0b5f2
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        installer_prefs_include.json9ad73b2d-86fd-4940-a56d-ac64f4538886.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\installer_prefs_include.json9ad73b2d-86fd-4940-a56d-ac64f4538886.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 e71141ea83e39703fe49b5938fe98caaf697dd3f21f5dd5218cf13fa51d45884
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        installer_prefs_include.jsonf73d2e95-ef46-48cb-815b-d75282195405.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\.opera\c1f0f2b2-fc92-402a-80dd-129f7b59b381 Opera Installer Temp\opera_package_202610031359391\installer_prefs_include.jsonf73d2e95-ef46-48cb-815b-d75282195405.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 f80122aed658cd567202c68f08e78c1a1d7589035ae731ec0fe1186457465faa
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        installer.exe

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\7zS8B0216C9\installer.exe
                                                                                                                        • Size 8.3MB
                                                                                                                        • SHA256 20b18b3c0b48d9ee2776e3972e1d4215c5b715be7d4d895caa4d3e445d12beb5
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        favicon_opera_one.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4328_1052900797\CRX_INSTALL\favicon_opera_one.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        manifest.json

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4328_1052900797\CRX_INSTALL\manifest.json
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 edf3f7c95ebed10cfa1c14b63a306a176d05ca454a0c334064e13bbdbb9c919c
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        reader_mode.js

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4328_1052900797\CRX_INSTALL\reader_mode.js
                                                                                                                        • Size 112KB
                                                                                                                        • SHA256 17f8a5c1d70acee668cc6964317d88802d4409c32b0d7e292b95e1de8ddb16df
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        service_worker.js

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4328_1052900797\CRX_INSTALL\service_worker.js
                                                                                                                        • Size 92KB
                                                                                                                        • SHA256 e4a71cc9098780c7cd5ba8a5ebfdf9d3d281a5710ed3b596b6c751d2886cd8eb
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        spotify_frame_interceptor.js

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4328_1052900797\CRX_INSTALL\spotify_frame_interceptor.js
                                                                                                                        • Size 5KB
                                                                                                                        • SHA256 895ef6ae0efde6f5e8af23d1acbfac4a5351bda31c89d2e64c05f2de0181dd56
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        messages.json

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_138169253\CRX_INSTALL\_locales\en\messages.json
                                                                                                                        • Size 396B
                                                                                                                        • SHA256 1bcb4888a65788a50ed88f4bd95955d1dafdc950b5ef4609b37f42934a4bf3b9
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        Icon_Light_Neutral.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_138169253\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        Icon_Light_Neutral.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_138169253\CRX_INSTALL\icons\32\Icon_Light_Neutral.png
                                                                                                                        • Size 962B
                                                                                                                        • SHA256 e8adb8a9dcca121a1853749ebef122b84a995ebf8775cd27b0dd54bab9840bd1
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        logo_128.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_1488203866\CRX_INSTALL\public\icons\logo_128.png
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 ff6b16ff9fe66e48327c79530b73e1953d911ef7c2ce52aef5a25449c4dd501c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        logo_16.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_1488203866\CRX_INSTALL\public\icons\logo_16.png
                                                                                                                        • Size 653B
                                                                                                                        • SHA256 0a9f9a6fe9f00c19e1f0989047226e811017316aaec8b872cb52303e06921dad
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        logo_32.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_1488203866\CRX_INSTALL\public\icons\logo_32.png
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 84cda3736c90c8468ec808c52ac01a4876f7b6bafeae0bf9448fd93a5007e2cb
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        logo_48.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_1488203866\CRX_INSTALL\public\icons\logo_48.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 0e34bf5a8a832b9e43211ca1fef8a05c0be60c9cbdbd8fd7a451d71e78905b73
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        logo_64.png

                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6892_1488203866\CRX_INSTALL\public\icons\logo_64.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 60f672b50db19a619d76522a46ecf0c13080ee469f62b191d0636c94cc5dc7b3
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        2bb7ce14cb8c6bfb.customDestinations-ms

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\2bb7ce14cb8c6bfb.customDestinations-ms
                                                                                                                        • Size 24KB
                                                                                                                        • SHA256 2467f914db3d253d23db6a567515983cc6c9762f424f8bac94dcf6082c600a66
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        OAL0AMQDP6KOGMN91TJN.temp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\OAL0AMQDP6KOGMN91TJN.temp
                                                                                                                        • Size 24KB
                                                                                                                        • SHA256 7b82e57a4255614ceac9c8d032486e5dc18e5c1f3afa6c2bd7a1f0f5e9b6378e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        RO2UYQDXMHB2VW7XRN0G.temp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\RO2UYQDXMHB2VW7XRN0G.temp
                                                                                                                        • Size 24KB
                                                                                                                        • SHA256 7412ec5c064fbe899c2e7cd630ac1ba8f6259ee4999db4b82a161d9364ebd701
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        settings.dat

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                                                        • Size 40B
                                                                                                                        • SHA256 0fee63dd3b3e5810e75d00337dda372c29fca55f732dd3bd52137b9236317d91
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        BookmarkMergedSurfaceOrdering1e1407ef-e3b0-4b3d-86ed-870d9fe4ae39.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarkMergedSurfaceOrdering1e1407ef-e3b0-4b3d-86ed-870d9fe4ae39.tmp
                                                                                                                        • Size 6B
                                                                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        Bookmarks2a0e2e82-8d8e-429a-8cc4-d798df49fdda.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks2a0e2e82-8d8e-429a-8cc4-d798df49fdda.tmp
                                                                                                                        • Size 30KB
                                                                                                                        • SHA256 9878907ce7f89ae2682ca2bf7dd245ee4d89d1aa56caeefca14527be1007b7f0
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        Bookmarks80066fc8-8dbd-405a-be30-4ff535c73004.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks80066fc8-8dbd-405a-be30-4ff535c73004.tmp
                                                                                                                        • Size 30KB
                                                                                                                        • SHA256 e50af8164de42229aa22de71aef3c1405babc7cbc7cbae4fd0de7fed8e37047b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        BookmarksExtras3811bd3c-fce5-4c7a-9c8a-023f23f3e30c.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras3811bd3c-fce5-4c7a-9c8a-023f23f3e30c.tmp
                                                                                                                        • Size 239KB
                                                                                                                        • SHA256 458873d140b63e896aba14deb88d84d3f050b0562a3ebdf0a3de763ad5b76d98
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        Bookmarksb9759244-3e4b-4f0b-b1a8-7ce9c3056622.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarksb9759244-3e4b-4f0b-b1a8-7ce9c3056622.tmp
                                                                                                                        • Size 20KB
                                                                                                                        • SHA256 4de95e091db383298729931fe3774dbfb59ca68bd7336793d9377567bc15dfe5
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        temp-index

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\temp-index
                                                                                                                        • Size 336B
                                                                                                                        • SHA256 0e7e931eb7917c550e79b89d0f3817c9c2c3a760638074f486265ca6ceecfdcc
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        the-real-index

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                        • Size 48B
                                                                                                                        • SHA256 940b6dd04c1059ca9f3e6e213ace7076ac27e52eb48a1bda1da3f833ae08ddcf
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        data_0

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_0
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                        data_1

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_1
                                                                                                                        • Size 264KB
                                                                                                                        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                        data_2

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_2
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                        data_3

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_3
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                        MANIFEST-000001

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                                                                                                        • Size 41B
                                                                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        main.js

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.8_0\main.js
                                                                                                                        • Size 47KB
                                                                                                                        • SHA256 9cc5e1dd96d76735499257c52d632a0a9e17ed4da929035067dadcc586000335
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        entry.ts-fXgzEoWB.js

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\entry.ts-fXgzEoWB.js
                                                                                                                        • Size 20KB
                                                                                                                        • SHA256 212c83f543a35a9bfcd4210296ab2201ebf38f18bbbe09409cfb258e588f3f9f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        entry.ts-loader-dBpbAyqV.js

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\entry.ts-loader-dBpbAyqV.js
                                                                                                                        • Size 341B
                                                                                                                        • SHA256 c8fa6d857c43194ef2b21b069e4a522b8f7841a7f2d23121a316d2c9b6ea82bc
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        scraping-method-Dq4mm50p.js

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\scraping-method-Dq4mm50p.js
                                                                                                                        • Size 6KB
                                                                                                                        • SHA256 99c8d4f76ebc9fc6cea115065570a12d41903c93e18c1c6385b5b2e70256eb70
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        service-worker.ts-fle0M1Xd.js

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\assets\service-worker.ts-fle0M1Xd.js
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 4ebb6cb9c3f033302d6a8c31329009082bafeab73c39cca179511b5a972ba8f8
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        service-worker-loader.js

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ijcflbogjpkmfhbbikopgkcojpdaldjm\1.0.8_0\service-worker-loader.js
                                                                                                                        • Size 49B
                                                                                                                        • SHA256 ebb831521006d7c846c68d66e583693f364d4e5d5214d2363e3ef6e78988f2a3
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        messages.json

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\_locales\en\messages.json
                                                                                                                        • Size 429B
                                                                                                                        • SHA256 c6a7161359e3c4fbc4059b7209c585f9aa2306c08e6c39a3003f4b29f2ceb22d
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        background.js

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\background.js
                                                                                                                        • Size 87KB
                                                                                                                        • SHA256 b199d4f989c63947c53a9d07450038cfe274b7a10e8cc7d688c4049ae14ef63e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        content.js.LICENSE.txt

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\content.js.LICENSE.txt
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        Icon_Light_Active.png

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Active.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 97d9553a4f725354a6d5c3eff11f31285fd89c3b150593f04785b83d0a56efc2
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        Icon_Light_Available_Red.png

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Available_Red.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 9eccebdbdb61efc0cbd8bccf3a5fedc6f9a1ebe5084b160783f90a56cd1efa7b
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        Icon_Light_Available_Yellow.png

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Available_Yellow.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 c165ef60bf3806cd0a7121a8d6cfd06909fc84b38a07d43e809bd7bff564099c
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        Icon_Light_Neutral.png

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\128\Icon_Light_Neutral.png
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        Icon_Light_Active.png

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Active.png
                                                                                                                        • Size 883B
                                                                                                                        • SHA256 50aa1dcfa9083b57dd6187752b2c149294210be12d263b793d27daf8d431954c
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        Icon_Light_Available_Red.png

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Available_Red.png
                                                                                                                        • Size 895B
                                                                                                                        • SHA256 2278e95b28851ade57217ab5c7b32598c44e1085693a3e26379643d29fa0a6d1
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        Icon_Light_Available_Yellow.png

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Available_Yellow.png
                                                                                                                        • Size 895B
                                                                                                                        • SHA256 726a50a9c008449ab7bafbf21325bfc72093b7ae6a56c5be90cf8c32a8a44641
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        Icon_Light_Neutral.png

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\icons\32\Icon_Light_Neutral.png
                                                                                                                        • Size 932B
                                                                                                                        • SHA256 b8e92f9e9b9dc82799231b8d1b57091a9d0bcdd9b54615f86e8c4e4e5c9f036b
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        index.html

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\index.html
                                                                                                                        • Size 222B
                                                                                                                        • SHA256 fd21c7ca4637b0221250a14b9fcfb6ebc3b734e659ad80151be4bc579db818f1
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        rules.json

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\rules.json
                                                                                                                        • Size 839B
                                                                                                                        • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        window.html

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\window.html
                                                                                                                        • Size 223B
                                                                                                                        • SHA256 48ead89755412349d4d261b8fd347282e52c1cdbffce846fa674d28a58ba3c35
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        window.js

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.21_0\window.js
                                                                                                                        • Size 2.0MB
                                                                                                                        • SHA256 79f8215d03832cf14283a73901e5419dd3a4442259282f4619bf82883c0e71ef
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        205c6344-6881-49f1-856f-24d8dbfa430b.tmp1ec61f0a-01d1-4630-90b4-e29e7d93fdb1.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\205c6344-6881-49f1-856f-24d8dbfa430b.tmp1ec61f0a-01d1-4630-90b4-e29e7d93fdb1.tmp
                                                                                                                        • Size 27KB
                                                                                                                        • SHA256 353f070543d1c43247d565c23d4c0346a8d65d902aa7bae04c6ae5e64bc5cde7
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        292d6fac-17df-40e5-b533-96d54310c91f.tmp676e4a54-a9f2-4cb4-be3a-fa32b2f34f8b.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\292d6fac-17df-40e5-b533-96d54310c91f.tmp676e4a54-a9f2-4cb4-be3a-fa32b2f34f8b.tmp
                                                                                                                        • Size 27KB
                                                                                                                        • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        43ef8661-98f3-44ae-8c10-8041a3d63c07.tmp8bea67c5-0f78-4637-b15d-dbcc5ba5a89c.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\43ef8661-98f3-44ae-8c10-8041a3d63c07.tmp8bea67c5-0f78-4637-b15d-dbcc5ba5a89c.tmp
                                                                                                                        • Size 27KB
                                                                                                                        • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        6c1a32c6-f659-497e-9328-d09485c286be.tmp039496be-78d5-4433-8603-b504857b8a1d.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\6c1a32c6-f659-497e-9328-d09485c286be.tmp039496be-78d5-4433-8603-b504857b8a1d.tmp
                                                                                                                        • Size 27KB
                                                                                                                        • SHA256 96092642177bb660dd55afcb6f5ac91a4facb6b88067958b5580b3a1d5cb53b2
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        981f3cad-bb4d-4c9f-8a42-1d9e2a3e0c89.tmp08deef3f-d26f-4cf9-b71b-ee753a6c9641.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\981f3cad-bb4d-4c9f-8a42-1d9e2a3e0c89.tmp08deef3f-d26f-4cf9-b71b-ee753a6c9641.tmp
                                                                                                                        • Size 27KB
                                                                                                                        • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        e0507029-bf9a-4cab-aec4-9887c35d3234.tmp8c65b387-9a82-439d-bfda-66fe37f54e34.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\e0507029-bf9a-4cab-aec4-9887c35d3234.tmp8c65b387-9a82-439d-bfda-66fe37f54e34.tmp
                                                                                                                        • Size 27KB
                                                                                                                        • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        Network Persistent State9d7ae18e-9ea0-4541-9ddf-df88736f8225.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State9d7ae18e-9ea0-4541-9ddf-df88736f8225.tmp
                                                                                                                        • Size 111B
                                                                                                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        SCT Auditing Pending Reports

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\SCT Auditing Pending Reports
                                                                                                                        • Size 2B
                                                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        Preferences

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 9c562892b3bc2add4016707e8abdb97bccaf5a16e9b1360f64cddf3e01350960
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        Preferences2a793511-bfb1-4fbb-94fa-28dc7ac72d8a.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences2a793511-bfb1-4fbb-94fa-28dc7ac72d8a.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 33d3502ba4164a88780360b31d87b24197677f1efa0aa739da22eb9d4606f72e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        Preferences47a80bff-05f4-4668-96bc-281ac24489d9.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences47a80bff-05f4-4668-96bc-281ac24489d9.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 9440d766fef188fed17cd268b3b88af4673f0916faa1d8e79ecb456115f26ae4
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        Preferences4aacc35a-cccc-48d1-9d6f-b59706bb45d4.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences4aacc35a-cccc-48d1-9d6f-b59706bb45d4.tmp
                                                                                                                        • Size 16KB
                                                                                                                        • SHA256 6a37977a11d7860b43948c01cf24935d5222a3499a5f0d757c846694048336c1
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        Secure Preferencesdca6440b-bd6c-4c97-868f-f8131569dec8.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferencesdca6440b-bd6c-4c97-868f-f8131569dec8.tmp
                                                                                                                        • Size 99KB
                                                                                                                        • SHA256 413f18232db5f6713c302e20d408b10318cd8b25b40160b25a3e8080674f0e85
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        Secure Preferencese595e6f5-5913-4d16-871f-c4f828a32e40.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferencese595e6f5-5913-4d16-871f-c4f828a32e40.tmp
                                                                                                                        • Size 82KB
                                                                                                                        • SHA256 706ac7559f8e1e86f7f7413cfcc47db1617b64493567bcbb2ad68ff02160373a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        temp-index

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                                                        • Size 96B
                                                                                                                        • SHA256 fa44c768632b1d11cbaeb9baedcac81ef40d284f09a6806c06a9a1ed2d212cf2
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        the-real-index

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                        • Size 72B
                                                                                                                        • SHA256 51e17b01250e67c4bd73c41c912479df3c35a82e7466d851c55d27b9af16d8b5
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        index

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Shared Dictionary\cache\index
                                                                                                                        • Size 24B
                                                                                                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        CURRENT

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Site Characteristics Database\CURRENT
                                                                                                                        • Size 16B
                                                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        session_018718ee-2903-401f-bf9f-e11b57f4fece.raw

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.raw
                                                                                                                        • Size 477B
                                                                                                                        • SHA256 5d11eff8edc3e436077cd3c4d77bc468d67f9bbe5c670d5b57357639d0a79bf8
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_018718ee-2903-401f-bf9f-e11b57f4fece.raw009096fe-3b90-46c3-ba65-097d4349ac34.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.raw009096fe-3b90-46c3-ba65-097d4349ac34.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 f4baae999ea99973adaa02f871651a806de1c22a809b41d268a3eb454f14fb3f
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_018718ee-2903-401f-bf9f-e11b57f4fece.raw0282b87f-7a7c-4d35-8188-ef4bd881da8d.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.raw0282b87f-7a7c-4d35-8188-ef4bd881da8d.tmp
                                                                                                                        • Size 893B
                                                                                                                        • SHA256 cfb9597baa78f73e929ed2bd61ee2dc176050af3ae89ed71dc31871d3825ecd4
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_018718ee-2903-401f-bf9f-e11b57f4fece.raw04856dc1-4a8e-495a-8702-407c57e8422a.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.raw04856dc1-4a8e-495a-8702-407c57e8422a.tmp
                                                                                                                        • Size 861B
                                                                                                                        • SHA256 4eb1c4a3201f1d522839ec9b9ca5d93889496270bbd989811b1f20c6b184ff3f
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_018718ee-2903-401f-bf9f-e11b57f4fece.raw184a80ab-0ceb-4a7c-92fd-968163eb08e1.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.raw184a80ab-0ceb-4a7c-92fd-968163eb08e1.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 0fdec4f138195a2837b6a83990c3792dae467706429bf3ae4d048e09ae907f90
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_018718ee-2903-401f-bf9f-e11b57f4fece.raw41920824-79ab-4ff9-9ef1-d9dba832571b.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.raw41920824-79ab-4ff9-9ef1-d9dba832571b.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 a8cc1f0f0b2e4fbbbb373b7c81d81c0ee2b7e27476327a6962e598722ade66b5
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_018718ee-2903-401f-bf9f-e11b57f4fece.raw467e550f-c054-44c9-8d5b-0130b8627ffd.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.raw467e550f-c054-44c9-8d5b-0130b8627ffd.tmp
                                                                                                                        • Size 573B
                                                                                                                        • SHA256 8ac01d13e688d29458d0f4895bc0f3e98c83307970e7c2875747de8943109b76
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_018718ee-2903-401f-bf9f-e11b57f4fece.rawba04f29e-e839-40b4-b621-e35625213953.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.rawba04f29e-e839-40b4-b621-e35625213953.tmp
                                                                                                                        • Size 877B
                                                                                                                        • SHA256 ff6beff23d9d92e1860f766ffb79d8575ab2b53faf7e22f22baa6f57dd5ddb62
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_018718ee-2903-401f-bf9f-e11b57f4fece.rawe3400d39-3e0f-444d-895f-afbf8c0c5345.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.rawe3400d39-3e0f-444d-895f-afbf8c0c5345.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 f108a87bedeffa4be57e184b88158c2fe0258971bf5c2fb50cc68f239540cc25
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_018718ee-2903-401f-bf9f-e11b57f4fece.rawf16631be-d064-48c7-bc53-c384d3bcbc1b.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.rawf16631be-d064-48c7-bc53-c384d3bcbc1b.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 2580373ea826e1bd6586c8e60e77494b0e7f4b3d2bf5323aed8461b6f55e4819
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_018718ee-2903-401f-bf9f-e11b57f4fece.rawf40014ea-756e-4b0a-b901-9a21de358fa7.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.rawf40014ea-756e-4b0a-b901-9a21de358fa7.tmp
                                                                                                                        • Size 701B
                                                                                                                        • SHA256 7a63d115c262a9705d6db0e7dcbccd6b15eaa4edd7caf1be8e6c33b18cce4656
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_018718ee-2903-401f-bf9f-e11b57f4fece.rawfea8f4c9-244b-416c-ac91-9ffcaeb42aae.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_018718ee-2903-401f-bf9f-e11b57f4fece.rawfea8f4c9-244b-416c-ac91-9ffcaeb42aae.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 97cc874645dd653e10090562a0d16e34ba75bdd05cf7202f4fe88579621e1413
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 443e999ff0599b907da5eb3a9c4d245cfa366d623ddb1fcc07483f3bd3ca0243
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw
                                                                                                                        • Size 477B
                                                                                                                        • SHA256 3a0f197bc5a43a3a18bcd80b33ac470e49bbb91d602f99a199c622d7e5d16395
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw0459c14b-b9d7-482b-af63-527c1b2d49f5.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw0459c14b-b9d7-482b-af63-527c1b2d49f5.tmp
                                                                                                                        • Size 11KB
                                                                                                                        • SHA256 692bc24618ca314a208fe1c5f338add41a7c5f61b02f8e02d7d2031e1143df65
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw07b7b519-fd6a-4108-ac09-5bdad78876c9.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw07b7b519-fd6a-4108-ac09-5bdad78876c9.tmp
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 113f78d536544c497da4c8ed8652c67e04668ca2b78effff9ec706f81592d45f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw0851ea31-44bd-402c-acbd-7d93a6173db3.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw0851ea31-44bd-402c-acbd-7d93a6173db3.tmp
                                                                                                                        • Size 11KB
                                                                                                                        • SHA256 dd3878fd5807a6dfe8b3464e0669aa725df52a4d9db7e5c41c033bc938d69a23
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw094680a5-ecc5-42d5-84bd-0a1cf2b0a177.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw094680a5-ecc5-42d5-84bd-0a1cf2b0a177.tmp
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 4444374f6c12b78c0c1680baa1210e2b00f5948b879b8f5f92cf434afa574161
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw0d8ba734-2488-42cc-8efd-bfc769bd5925.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw0d8ba734-2488-42cc-8efd-bfc769bd5925.tmp
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 65946fcca047cdc53b04df495ec029f980bf94a959cf0005f9a208f9d84f60be
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw0e26ca2e-50ee-44ea-8b24-ea2e41563d34.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw0e26ca2e-50ee-44ea-8b24-ea2e41563d34.tmp
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 f3768524b636307a9a8f1063856e7813d5a10405fa710b178e8c7a78983a26ff
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw107628d1-0657-4662-a27c-f192d2283f7d.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw107628d1-0657-4662-a27c-f192d2283f7d.tmp
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 5c4c1c66f28fbcc46f094cc4b33278f46f61236f4169246502b7aa139f91aa74
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw123105c8-af80-4935-8abd-17b9785ea7ef.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw123105c8-af80-4935-8abd-17b9785ea7ef.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 c02ccff719a4780a3c9fedbed440301e489a8acfbbd955cc77389f85af423f16
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw124c9d98-3277-4665-b559-2674877ff37e.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw124c9d98-3277-4665-b559-2674877ff37e.tmp
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 08aa3886b4b640444d9e9d40eb98f20262e602cf49f8e8199d51a6f29a9e05ae
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw1371c441-8d44-473d-be68-6bc766cb324b.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw1371c441-8d44-473d-be68-6bc766cb324b.tmp
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 36abf84c22da5f11fe7f8302b7babd38a6f2fe1dad8cb377dfcd6b5ce186fbc4
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw18125b32-908b-4f25-83c8-bf9f94b4ea3f.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw18125b32-908b-4f25-83c8-bf9f94b4ea3f.tmp
                                                                                                                        • Size 11KB
                                                                                                                        • SHA256 b5a1608c59a48572ea68cffbf0418e576b0ef4bb7a86cc68828c5610070a444f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw1da410a5-1dd5-4e50-b781-d28eb126cc60.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw1da410a5-1dd5-4e50-b781-d28eb126cc60.tmp
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 d110a3e6da1e4a86adf082706cc5082ab3f10514b040d917fc60c8a622f51565
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw1da87aad-e830-4016-85e0-28ecc5d5c70a.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw1da87aad-e830-4016-85e0-28ecc5d5c70a.tmp
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 e032468e487068847a7eab2c62f1beb1089e05e06fe3b922657c4651ccbd6f96
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw1e3eb31b-071c-4104-8edf-4fa4702f07d7.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw1e3eb31b-071c-4104-8edf-4fa4702f07d7.tmp
                                                                                                                        • Size 16KB
                                                                                                                        • SHA256 f8a2e5fc29fe04b73d606f71b1ca4238c877b9e9afe6fd5353b1456f7e633b8c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw269c7208-fbbe-4738-bec2-f26ac5de5ae0.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw269c7208-fbbe-4738-bec2-f26ac5de5ae0.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 cca52c70d55ad3445d087c1132b0be18770fd25089ea21d769e659594ced8036
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw287967d1-1766-469c-a9b8-f2a43647334b.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw287967d1-1766-469c-a9b8-f2a43647334b.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 d9acee6217351ce861cc87f5888a6b1664d1b59d7800849d71d49933eec44f08
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw28c0e06f-6919-48b9-8462-2bdb387c2968.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw28c0e06f-6919-48b9-8462-2bdb387c2968.tmp
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 cb1371c8b4306af27e4818b4f2edaf4f32748559fb472ce59ec877e2b1797bc3
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw29e853af-1bd6-41eb-b3f5-f3e33da119c5.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw29e853af-1bd6-41eb-b3f5-f3e33da119c5.tmp
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 37bf09a9dbd611a90503af8e4d7ce5268c9685a99a4d8c4e8274bd931c6d5296
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw2a87dd01-8cb3-480c-a165-c0a39b876213.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw2a87dd01-8cb3-480c-a165-c0a39b876213.tmp
                                                                                                                        • Size 11KB
                                                                                                                        • SHA256 78c81ad52b4ceac237fe15c7bced125c2063bb581ea5ceaf3775259f8438b0c9
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw2b0839cb-cee9-40a7-84e2-5ffecdd734c3.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw2b0839cb-cee9-40a7-84e2-5ffecdd734c3.tmp
                                                                                                                        • Size 16KB
                                                                                                                        • SHA256 9317d580eaed3f7e92f6ca6f3696134abbb8d4493dde49cfa48ddf89f1eaf4d6
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw35cebb36-4341-47ec-a533-4fdb4398d946.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw35cebb36-4341-47ec-a533-4fdb4398d946.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 cda01a2ff142a8ffc95846f732d9c7cb14dcadc93aa486b8c75806a46cba5c8f
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw3f344b6f-bc2d-4775-bb59-be53e3d22438.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw3f344b6f-bc2d-4775-bb59-be53e3d22438.tmp
                                                                                                                        • Size 717B
                                                                                                                        • SHA256 65e253130a4d1bbbb782864100bff6711c86d72482230229cb2f8e712c0f2cc1
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw3faae56a-0acc-41b2-a19b-058e6570cf80.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw3faae56a-0acc-41b2-a19b-058e6570cf80.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 1d328f7524c9aeb58eaa9fe44cdfb5be6ee313acdeecf028843140f0a1920447
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw3ff23384-8c85-4484-8bf3-451a494ad25b.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw3ff23384-8c85-4484-8bf3-451a494ad25b.tmp
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 65a988577d904fb16990e53a9af8a6a69a3874486d6edec04a5a2baad2847312
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw410e4022-58be-4146-bcf3-24e56d75322b.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw410e4022-58be-4146-bcf3-24e56d75322b.tmp
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 e9d01b330399a8ce4c4afa5100a5f68501afb663b4ddba6d7774c3470737fbe7
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw4502ec91-9b10-456b-94e2-650a776e03ab.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw4502ec91-9b10-456b-94e2-650a776e03ab.tmp
                                                                                                                        • Size 16KB
                                                                                                                        • SHA256 810fedee76a1c1987e30bce74d285b2653fe40577fd27166527096a2c8069873
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw470303ea-5c49-4558-84b2-45c07cf9f582.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw470303ea-5c49-4558-84b2-45c07cf9f582.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 68c5751776c2abdb60b20fd7246a90c5c8f4fc25a8809979ccdc198400204516
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw47c5d800-11d7-4e27-b220-596efdb52509.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw47c5d800-11d7-4e27-b220-596efdb52509.tmp
                                                                                                                        • Size 573B
                                                                                                                        • SHA256 61b10776f3f5c7f898e3a204ab0b8d1073e11f0bbd3f9251937026e4e889ddf6
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw47ece6f6-6483-45fe-b255-97554d57f0b9.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw47ece6f6-6483-45fe-b255-97554d57f0b9.tmp
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 b676ca21e2e6ad22f773dbc5aa97c6b724cd9d2e3ebd908b8b2b33ff17711d52
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw48dc85d0-fd49-4487-8b2d-82480945f691.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw48dc85d0-fd49-4487-8b2d-82480945f691.tmp
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 98c93c6e6f13d736d7aa7f575a6e080eb84a7b9b43591a4b5478c8391131f5b4
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw49e2b8bb-372a-41a7-817b-a7b555dadcac.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw49e2b8bb-372a-41a7-817b-a7b555dadcac.tmp
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 d11f3c7888f8355d2d91d3b7fba8023dc2f0ca26ce02c819350cc6e40103f4f3
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw4c8d321e-e4c8-440a-9425-6ef6457a75e5.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw4c8d321e-e4c8-440a-9425-6ef6457a75e5.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 787e8aa1cdf121f8c1d7171ddb4474d46f98b133f3dca1878393af6845eca10e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw4d27412c-04b3-4a7b-9b7c-92552649d91e.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw4d27412c-04b3-4a7b-9b7c-92552649d91e.tmp
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 b2b6cf13e3dcd1bd530eb2cc351fb580acefa648a6385cffe1cf2f90ae02bf4a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw512e873c-c585-47cf-ac58-a9275e6c9e45.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw512e873c-c585-47cf-ac58-a9275e6c9e45.tmp
                                                                                                                        • Size 829B
                                                                                                                        • SHA256 28bf75b844208a83e646ff942aec04a4ad4dd5980344ce9d0c5243e69df1fb84
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw52f43265-2111-4959-b242-5acb8103c3e9.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw52f43265-2111-4959-b242-5acb8103c3e9.tmp
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 7a63fe9b2705a142432b3869b768b26efe1ad10b5cc4a0819d53133fa200eee8
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw538a9a00-60a6-47ec-841f-7d36e4b28684.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw538a9a00-60a6-47ec-841f-7d36e4b28684.tmp
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 56c40621159c4bfc312e13e83ba7350011955df1eae1289a6fc259eed3822547
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw54b2c7cb-30a2-418f-9711-41271e017ce7.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw54b2c7cb-30a2-418f-9711-41271e017ce7.tmp
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 d0e011e1754ce8d27613feb6a8c5282898ee6df63426b9b5e3cf79c0965cb166
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw552ba007-f3c0-45c0-a258-a59809fae1d1.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw552ba007-f3c0-45c0-a258-a59809fae1d1.tmp
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 f9355a6f53dfaf4199a46e439378c8fb4abab520a6b0373a681dda315313d622
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw56442cee-33bc-4056-9da4-154e669819f2.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw56442cee-33bc-4056-9da4-154e669819f2.tmp
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 1445a02aa74573d47d7b59a94c2fc1591b760fc0396a494dfe978f790893e1f5
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw56cbdbff-688a-487b-a6b0-d19a6afdb357.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw56cbdbff-688a-487b-a6b0-d19a6afdb357.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 7a107f9bf0a138ede1a2fd8c0af7644d371f73091f0e46987eb340be76497bfb
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw577836b5-26d8-4c77-b6a8-c5dbdc4b1dea.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw577836b5-26d8-4c77-b6a8-c5dbdc4b1dea.tmp
                                                                                                                        • Size 16KB
                                                                                                                        • SHA256 7e7bb2503735dced6e5015b42d0cfd0d06da35a1a02739d239c7f533c1e6461c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5a3200eb-e259-4459-9016-e419ccfadc35.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5a3200eb-e259-4459-9016-e419ccfadc35.tmp
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 107369821c9109a7b1332e60807e807f0c0fc2e1423ec3358fb91f1181a73c1b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5b6ee9a0-dab1-4c8d-9996-8991b463d55e.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5b6ee9a0-dab1-4c8d-9996-8991b463d55e.tmp
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 f8388d508cb354ab9afa2f1760290334e3c674eb2b345a7dad8f36e3357ee2f7
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5b921b92-12b6-46ae-83f4-ecd0188beeeb.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5b921b92-12b6-46ae-83f4-ecd0188beeeb.tmp
                                                                                                                        • Size 1021B
                                                                                                                        • SHA256 e138ca3a0b9d47e707b1a2b454de8d3ec06e7960abdf70de0b71c7760d2acbdb
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5c6e5247-d40c-462f-b9a1-b98559a522b1.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5c6e5247-d40c-462f-b9a1-b98559a522b1.tmp
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 f4bf21fa0858bcf5593937ac269e29b7563be8de2d8a083a25d361da7872b71d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5d523cb7-1622-4a74-b8a4-a13ff13b0e9d.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5d523cb7-1622-4a74-b8a4-a13ff13b0e9d.tmp
                                                                                                                        • Size 11KB
                                                                                                                        • SHA256 e2a199631426f99e4665a773521e83c2ff92d3500d4f197c6481ad22fd79e916
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5fde180f-c300-4614-bb6e-bb833db2b719.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw5fde180f-c300-4614-bb6e-bb833db2b719.tmp
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 10a47a430ec7b709190094977cd638d350068424c7bb8b1dbd2da4b9b8ee9515
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw60f155ef-4815-446e-ae2e-03fcbd27b9f1.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw60f155ef-4815-446e-ae2e-03fcbd27b9f1.tmp
                                                                                                                        • Size 10KB
                                                                                                                        • SHA256 a1b8d9a1f85e37f54cb791688815400ac788c1b9d00e2e941d24ba78ef7bbcef
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw6466fc74-fe0c-4e42-8f63-4f97c8b86b05.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw6466fc74-fe0c-4e42-8f63-4f97c8b86b05.tmp
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 59c9c187d2feab582931bf5859b5f40bb31d3de040606000aca356870c4a66ae
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw66f7ab1f-6cd9-4618-8132-6dfdb8eb26d8.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw66f7ab1f-6cd9-4618-8132-6dfdb8eb26d8.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 e014fc75b272f21a6aa8bd6d8c3b8e1811713a35e595f892ec709af6000d6d02
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw67f83340-cf42-4d74-b540-021bbdce8eeb.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw67f83340-cf42-4d74-b540-021bbdce8eeb.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 553c54cc1c922185725313d7154e1345ca9bd767b23c9be8550b58d12c27c83e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw69d581ce-a382-46ba-8885-7c409d8e6164.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw69d581ce-a382-46ba-8885-7c409d8e6164.tmp
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 486e64c9315c17d247718fa620299237c069f943c3478716be176a51f8669014
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw6fa72dea-862f-4a59-8592-9dfa7a6e1a6e.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw6fa72dea-862f-4a59-8592-9dfa7a6e1a6e.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 f7fd8b523264bbdb1b92810d8bb3bb163316591ddd27e557dc3981064bf99f98
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw6fafdffd-a64c-4c23-a382-6c7a6f845fa5.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw6fafdffd-a64c-4c23-a382-6c7a6f845fa5.tmp
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 94e18b5a86814be035ca3f2dc31b6fabf186ce4a8c137f2adc544024582f590c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw71ce5823-1a98-4280-bd4c-eeedddfdddc3.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw71ce5823-1a98-4280-bd4c-eeedddfdddc3.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 60497d47fcc7b099319f216a4bedd7c1097a162bbae6e8ce8e679d3a96d213f8
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw71d5adce-ae5f-4789-90ef-0a46c93645f9.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw71d5adce-ae5f-4789-90ef-0a46c93645f9.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 88ba81f65eed53fd81646e45247f86facf658b8056f0f0549b854f0650fd1874
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw74669787-012f-49d1-90df-3b4e40bd01f5.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw74669787-012f-49d1-90df-3b4e40bd01f5.tmp
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 a0d6127c5dbf422d7f0423edb9e0ffe69a2c24b366c2556bee56b1e8251c9adb
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw7a6b7a13-a141-44c6-bfaf-a495de0ce6c9.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw7a6b7a13-a141-44c6-bfaf-a495de0ce6c9.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 7548bffde9db1aa5a05624f0c2587363c4541ff4343d334150deb3ad45d48b8d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw7e397500-e4d6-4434-a15d-d40b267f0f6d.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw7e397500-e4d6-4434-a15d-d40b267f0f6d.tmp
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 28b447c18802fae052966e837d37138db086b719ef953069058eff17e2e4f803
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw7e9f7fea-5779-41d9-a8ad-ea4fa2aaa13d.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw7e9f7fea-5779-41d9-a8ad-ea4fa2aaa13d.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 320cc9fbe30a017cb54c2cb13ed5393eea357b933e4cd5989dfe85adcdd72bea
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw807401f9-57e9-42d9-90e5-e38dcad184f0.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw807401f9-57e9-42d9-90e5-e38dcad184f0.tmp
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 d6ca692e288036b2e6a657f718c9b80253c09c157f330d3c040ae2769d5984fd
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw8139762f-51b8-4d17-96bd-1e616108f135.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw8139762f-51b8-4d17-96bd-1e616108f135.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 1e996a17a4f0c0fa214d711e83feb07dcdc73beb978f36078f4d118248477570
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw815ff195-31bf-4293-8b34-eae7012f2af1.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw815ff195-31bf-4293-8b34-eae7012f2af1.tmp
                                                                                                                        • Size 11KB
                                                                                                                        • SHA256 b9cc9b04414ec628b46e45c396ddedc32d10d23b2e86cfce75ab2dc1868e75b6
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw8653e98a-7824-4ea2-aee8-8df5ab6710cd.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw8653e98a-7824-4ea2-aee8-8df5ab6710cd.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 d83ff4d8a2dd31fa693dddf4714e1c4cf0813aab61c821adbf52e4659badb432
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw8822cf5c-db8d-4fbe-8f8f-ea1c0c74027e.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw8822cf5c-db8d-4fbe-8f8f-ea1c0c74027e.tmp
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 698fa91b8ae9b7ce1b8c8fcc920f7328a8f406c432961c713779f26074588c10
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw89948e64-be99-478e-b363-1a046bca48c4.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw89948e64-be99-478e-b363-1a046bca48c4.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 45186aa3157c74f3ac718990e417cea7eda6250be73aff5772815c6b8112211b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw8a23a0c4-ca71-405f-8779-624adf0f3643.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw8a23a0c4-ca71-405f-8779-624adf0f3643.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 451513942325dd21df79f13aa3632cfec947ee505f7b48324020a4d7e570ba86
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw9056284c-9c68-4dd0-acda-25b6e6af9323.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw9056284c-9c68-4dd0-acda-25b6e6af9323.tmp
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 9527b0e61199500e7d6b88512493ce385a802a483307100a8935d29b108f50de
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw91505297-586b-44cd-90b5-d9f68e3aa23e.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw91505297-586b-44cd-90b5-d9f68e3aa23e.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 568c313ee3e6c468d192051c16a7280ad7c3c44867e18a6dc5782391d9a7cdd3
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw91e245c4-aa2e-436f-8bcd-f0573aea40e6.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw91e245c4-aa2e-436f-8bcd-f0573aea40e6.tmp
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 bc77b89a7af28f9ca281d365d85f16b57bd7a2c9fb83c7b34fd3d5dff31cbc19
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw91e340eb-7be2-4152-be2a-f160f616d59f.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw91e340eb-7be2-4152-be2a-f160f616d59f.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 809de94b9d16a9d266c251d52c839b4b451250862c4564e121fecba2efb26923
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw94464351-4b2e-4693-a6dc-80221ac3d71c.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw94464351-4b2e-4693-a6dc-80221ac3d71c.tmp
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 9e6a52e3bc36b8b654ad8ecc470597fab42eb263330b24616d242b317b784c01
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw9895d4b4-32d8-4795-8425-6ab7b061e418.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw9895d4b4-32d8-4795-8425-6ab7b061e418.tmp
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 18b7c2619f4febd74d069a099b1bcb1ed685a64a90d9b537c44b58996413a373
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw99cde943-7f0b-494e-a84e-e58c6f99a754.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw99cde943-7f0b-494e-a84e-e58c6f99a754.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 e1c8c1c4fac6eac9c77e532353877b0ca081703a411c6f177b3afdd7f8e36537
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.raw9d50fbfa-e4ca-4cad-8bd7-4ba6ae62df96.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.raw9d50fbfa-e4ca-4cad-8bd7-4ba6ae62df96.tmp
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 c4b42fb5e872474f9fff2c692a0f2543102a3f33ae877e5ff827fdf8f1235932
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawa1718d4b-c8d0-4927-93ef-f9efa7cffdd9.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawa1718d4b-c8d0-4927-93ef-f9efa7cffdd9.tmp
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 3e565314ec89e6fd16d07b399b064484c05f5ca4cd295039267fe912088ae0f1
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawa65e7694-1294-4a34-b28b-78960077a2cd.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawa65e7694-1294-4a34-b28b-78960077a2cd.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 5e03fc5870a5baeb9ebf550b9a325d7a7d317c7e452fd3410901039f89af02cd
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawa85d65a2-f350-4d95-9d9d-2deec45b6b84.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawa85d65a2-f350-4d95-9d9d-2deec45b6b84.tmp
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 e6ff256f9f403da85fa1bcba4eb0086469b38e1f4855ca6b07e0ada09cb92c4f
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawa8a4f7ff-c8ae-4ec0-8b01-01338fcf3077.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawa8a4f7ff-c8ae-4ec0-8b01-01338fcf3077.tmp
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 bf5d9736b60197578fce2f23cee76fa1a9ba321eeb61fc902f59ad42cdb2cf46
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawae7fe5ee-796e-4488-bcfd-e24f79ae6e11.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawae7fe5ee-796e-4488-bcfd-e24f79ae6e11.tmp
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 578ecb0e217b158ff9950120b18327e1678efba7a7e1ebdc3a78727db6c4cba7
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawae83355a-7ab9-46a3-a93c-4fc1d7ce66b6.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawae83355a-7ab9-46a3-a93c-4fc1d7ce66b6.tmp
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 3cb9cd36d5380a37182c64985fcadfe2d29c28da24d87de9c9395124c932e6f8
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawb1944435-ffa6-47ba-ab71-43b6e9d5b7c2.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawb1944435-ffa6-47ba-ab71-43b6e9d5b7c2.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 08d3256bb6a1dcef71ff31dd053a345dac7cc2975844b23a86b92fc452bd0a03
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawb64040fb-67b5-4f3e-b992-ceec6d5f3063.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawb64040fb-67b5-4f3e-b992-ceec6d5f3063.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 b46e62e738ac4dab92227605f9568cc4d67e1bb4fa95f327e7bfab2e1d882899
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawb6f052f6-1efb-4f89-b8d4-e920220750ce.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawb6f052f6-1efb-4f89-b8d4-e920220750ce.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 89a53648e19416bf3165c6a8192c5c301d756922f87b2754ff210735231917d4
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawbc39c55b-053d-4706-98fc-6702a7004732.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawbc39c55b-053d-4706-98fc-6702a7004732.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 9d461276547c7b2579ea5be7af2dd33db452de43971cfb880e8638b9d5aa6826
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawbe9eb159-16d5-4c8d-9a6b-4ec99ccb3683.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawbe9eb159-16d5-4c8d-9a6b-4ec99ccb3683.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 6eb8de4f58d71488e2bdd03a1d35f4304edd6749e674688bc92b2b10ee3fbe7c
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc1617815-19b1-46b4-a63d-cf73498e40ad.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc1617815-19b1-46b4-a63d-cf73498e40ad.tmp
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 bea02b60f431f8f1d18ba2d5ff3ce024ff11361fbc5a037dd2621a519676b662
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc1cad73b-d7e3-4eed-9cbd-849a865e056c.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc1cad73b-d7e3-4eed-9cbd-849a865e056c.tmp
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 e9c7bec384efff847b237789b3935c6354abeeb4a14494359d7a235042a2987b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc258dfd0-f210-459a-9d3e-92608b1d1cb7.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc258dfd0-f210-459a-9d3e-92608b1d1cb7.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 17beb12f041ed2406c5ff4906850344f5f510f3f484d30f4bf2ed81d2ce372cf
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc610a4d8-ce46-4f9b-ab4f-6de48e1b44cc.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc610a4d8-ce46-4f9b-ab4f-6de48e1b44cc.tmp
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 89a3af5aa1ec3b0ff6ea9989b512afe6fd1ca5a98a344f79998e1f5e5c6df630
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc75ee51f-f3d6-4821-9901-72cf1b161be8.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc75ee51f-f3d6-4821-9901-72cf1b161be8.tmp
                                                                                                                        • Size 12KB
                                                                                                                        • SHA256 255bd30403f7bfdc8de749a7001baf0cfaee3bb992294ef69366495936481d26
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc8c3a5ff-0ffe-409f-bf97-cf1303b8d126.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawc8c3a5ff-0ffe-409f-bf97-cf1303b8d126.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 b85166a058a41fe91ce10af10a647f25ae06fb7bf466f69184f48b9c0e29de25
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawca53e9d4-b7e8-4fae-9209-49ca47bbce9e.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawca53e9d4-b7e8-4fae-9209-49ca47bbce9e.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 b6072e3519cb69229ce3b035dbad147e8f07ebf41c6711447df1a271aed86309
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawd39b6e90-1d12-460d-b969-c8fff00032b8.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawd39b6e90-1d12-460d-b969-c8fff00032b8.tmp
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 536d94b0e5e3d0a1357268f5a54b5b32a88148e0f315d031d9b4ec4f792d1015
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawd9326a32-2ee6-4761-87b4-1b40e7fea42d.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawd9326a32-2ee6-4761-87b4-1b40e7fea42d.tmp
                                                                                                                        • Size 7KB
                                                                                                                        • SHA256 564e3688c188698e92b645224715d738f0c4c2f5a1bba34cd0058da44250ee98
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdad40a22-3543-4252-88bd-957c15cc225d.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdad40a22-3543-4252-88bd-957c15cc225d.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 d85d2356ddbd7f375fc3cfa0cb34c0a2e3510264af0f82a09c35aa372404f641
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdb34fa06-5dcb-4d6a-be68-5983c0c8c60f.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdb34fa06-5dcb-4d6a-be68-5983c0c8c60f.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 07761dffc919bdb62b119490c6e890c45ff68a5fef1c2ac255e3b8b46b7bfd72
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdd04fc7e-863a-49af-b0e4-ba54e44fb893.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdd04fc7e-863a-49af-b0e4-ba54e44fb893.tmp
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 d7a2fe95d4e86ae1579f0e278415914a5a1e6883f59c437e310e50ad3c7b2c4d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdedf7077-71ee-48fb-a4c4-fc5e49458e14.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdedf7077-71ee-48fb-a4c4-fc5e49458e14.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 d28de40287010ea5ac6ee0522b3ee093cd732e2ed665a0b6fbece9f290874d1a
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdf73919f-af6c-412e-bfe7-65e424e6e9c0.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdf73919f-af6c-412e-bfe7-65e424e6e9c0.tmp
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 042e97b505dd007c1c53e9914bf665a32761c454a5f79f93ebb461895917ad4e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdfb61f19-1713-4acf-8ad0-7e549c56dd71.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawdfb61f19-1713-4acf-8ad0-7e549c56dd71.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 c78e5779128f64084a53ff9dbbadb61fc9cfee0a7e5fbcf37ccc6a56958affa7
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawe157ec87-bceb-4b67-b1f6-9092f68a152c.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawe157ec87-bceb-4b67-b1f6-9092f68a152c.tmp
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 2a37cc1ba430daaea15422139d51f53d839e05ae83b2330589da0c2b3d5010be
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawe3f15caa-a80a-40de-a27a-a9dd03edc1ea.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawe3f15caa-a80a-40de-a27a-a9dd03edc1ea.tmp
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 43fb5b5f191364735825f564afd1bd18b4af71d8f5beae3a664b1c6ecf30ae3c
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawe8c6ee17-7c12-4c70-a76d-d1a12f697e7f.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawe8c6ee17-7c12-4c70-a76d-d1a12f697e7f.tmp
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 99f16aa70bb771d247b69bc1dea674fe7d2641d708aa971d88d7fd591cd1068b
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawe8e20b0f-31e9-48e0-96b2-bdba642ff209.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawe8e20b0f-31e9-48e0-96b2-bdba642ff209.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 001b55d88bfd6daccc4e9aa4376d43b2dbc2b4759c7cf6e97b5f8266d12059ce
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawe982dbb8-9797-4c0c-a41a-9f5d22e786e0.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawe982dbb8-9797-4c0c-a41a-9f5d22e786e0.tmp
                                                                                                                        • Size 11KB
                                                                                                                        • SHA256 1433b6b7c07eb0ac9790ebdd609caa62269a07596435b4a2cb67fb25bedad00e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawee5f7289-8b4c-4200-97e0-ef36c1aa078c.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawee5f7289-8b4c-4200-97e0-ef36c1aa078c.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 3b87c3c86c341e6c5a45701fc88801e721d5682ae9a13687b130e6a26ebdf25d
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawefecc93b-53ce-4c52-b74f-94e607595ea9.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawefecc93b-53ce-4c52-b74f-94e607595ea9.tmp
                                                                                                                        • Size 13KB
                                                                                                                        • SHA256 061cab39817c4bcc59d89073104ead54b1ac0aad91c48c5c360118efd2426a40
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawf1c4485a-b537-4526-9e79-2fe9369327b3.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawf1c4485a-b537-4526-9e79-2fe9369327b3.tmp
                                                                                                                        • Size 15KB
                                                                                                                        • SHA256 4226145e191894e9baa6f448209594a51e82acfd614541ef095812514bcdb411
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawf488e32f-2d65-4af3-a00a-040711077859.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawf488e32f-2d65-4af3-a00a-040711077859.tmp
                                                                                                                        • Size 8KB
                                                                                                                        • SHA256 a4109ab1cbeadf701d6e1d99817feb398025162a5c7d99d0c0ed718a671efc1e
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawf657baa0-39ef-4d6a-9f27-cb8162d7390a.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawf657baa0-39ef-4d6a-9f27-cb8162d7390a.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 39d0c4cca96047b8a55a4e4259fe6ff9100a9216f5924a74905b9be7f15d69f4
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawf7935ea7-e3ae-4e28-b844-6d9178b286b5.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawf7935ea7-e3ae-4e28-b844-6d9178b286b5.tmp
                                                                                                                        • Size 9KB
                                                                                                                        • SHA256 e3d942c79dc4f0392a5a7a82141e4152dae49699a27659785ec2b4f7dbc17504
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawfa9d516e-7ba9-4da7-a5cd-c35a1b58d72e.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawfa9d516e-7ba9-4da7-a5cd-c35a1b58d72e.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 5c030a6b4f3cefcb12f7491bbee09e239a0f0e47c3afc3deca08758bbf2473b7
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        session_71e09861-ba0e-49ec-918f-458d8d91a883.rawfe8bd790-8301-4c1a-9544-f084d78f476b.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_71e09861-ba0e-49ec-918f-458d8d91a883.rawfe8bd790-8301-4c1a-9544-f084d78f476b.tmp
                                                                                                                        • Size 14KB
                                                                                                                        • SHA256 f47db6f2906562bae79fce868726ab7dfb70d9a0770b06863a4a2fa60fe8f8f8
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        ssdfp4328.0.1987911056

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4328.0.1987911056
                                                                                                                        • Size 203B
                                                                                                                        • SHA256 0bc5ee51797bdae99b3c358c2ee484c2784cb669e967367d86264ac42e218f4d
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp4328.0.198791105623ba4927-6506-4580-a718-f1903959f8c9.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4328.0.198791105623ba4927-6506-4580-a718-f1903959f8c9.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 8ed8c00a453136e8d20532a949da24ad9cc77b2161f7bc461b727858cecfbbfb
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp4328.0.1987911056bbe3f7cd-a9fd-491a-939c-82a29e3a5b53.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4328.0.1987911056bbe3f7cd-a9fd-491a-939c-82a29e3a5b53.tmp
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 34e35aa831d73a78168e87bf35e142a3cfae04a8801581a5a3829101a28fdfce
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp4328.0.1987911056c2fb45c6-ac4f-46af-8052-2951ffe6c995.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4328.0.1987911056c2fb45c6-ac4f-46af-8052-2951ffe6c995.tmp
                                                                                                                        • Size 265B
                                                                                                                        • SHA256 b5473e7cca35e925c397eed6b95dae0ebf1f5d033e8f7948ba24bdbb8b698a1f
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.1583203451

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451
                                                                                                                        • Size 414B
                                                                                                                        • SHA256 c8d5c86983768b6b314b7be6c95668d77c8c56890d07962b8d270471422da936
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.15832034510e8af586-30ba-44ea-8dcf-872aceb3184a.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.15832034510e8af586-30ba-44ea-8dcf-872aceb3184a.tmp
                                                                                                                        • Size 695B
                                                                                                                        • SHA256 4a9710afe7a674d28a85dfd2c548e19c28658dca4bc17a032838f0a0e99d4608
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.158320345119149867-c520-46b0-b0cc-fc66d2e7d9f6.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.158320345119149867-c520-46b0-b0cc-fc66d2e7d9f6.tmp
                                                                                                                        • Size 605B
                                                                                                                        • SHA256 bb23d935f527b8065c264a63f3930bced72ccaf8d934b4b4a366f04ed7a415e8
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.1583203451197afea1-57c1-4e12-9dcf-1dbc4442ce18.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451197afea1-57c1-4e12-9dcf-1dbc4442ce18.tmp
                                                                                                                        • Size 891B
                                                                                                                        • SHA256 00c315706071c7f9f57217b41f3c739dc0ac50955504ebbbbba02cbd1e79877d
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.15832034512b285ae8-22f4-45a3-8e71-48f8a1e8641f.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.15832034512b285ae8-22f4-45a3-8e71-48f8a1e8641f.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 1778a553eb0959f39ae3dc82c59772af39db68c08d2fb7b980f635979cb773d5
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.158320345136675c08-de20-48c7-be40-3acc6f6035ea.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.158320345136675c08-de20-48c7-be40-3acc6f6035ea.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 199a8fa20a7db30f965e67071246b29497b07e8770bc83c60677334ee37661b0
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.1583203451410a9555-9e51-482a-9063-e20906ea6f83.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451410a9555-9e51-482a-9063-e20906ea6f83.tmp
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 b4d60577db5038cd684401a01eca00fdf460f13434eae7d05007f69e0f18dbae
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.158320345155ee50c3-7a26-4329-b9a6-b91326d763d7.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.158320345155ee50c3-7a26-4329-b9a6-b91326d763d7.tmp
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 631138211b0f9de9fcb858d7bcf06a99705bc1398893cd76e98a819facefe865
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.15832034515de84d29-c9c0-4720-8e58-eab889be84e9.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.15832034515de84d29-c9c0-4720-8e58-eab889be84e9.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 afcae01c3b50be3ae1dda220157ec3d3d00c7b697bc86f95cfb6038df210bf92
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.158320345163c6ddea-ccab-42d2-bfcc-10fa9e680dc0.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.158320345163c6ddea-ccab-42d2-bfcc-10fa9e680dc0.tmp
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 bd276810875a89359b0f14e4021139bafaf2852920bea6f0c3979a3caa7921ea
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.15832034517761a132-74ad-420d-b83a-c56b5dc1f919.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.15832034517761a132-74ad-420d-b83a-c56b5dc1f919.tmp
                                                                                                                        • Size 2KB
                                                                                                                        • SHA256 623718f1592974b18b31187037c92245d8111db08944b0b4c90701ebff029ff3
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.15832034517894c5f3-8493-4316-8f55-5939c6bb6c0e.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.15832034517894c5f3-8493-4316-8f55-5939c6bb6c0e.tmp
                                                                                                                        • Size 507B
                                                                                                                        • SHA256 c8eec34d8e5df2bafd3384738664aaf60b61c97514fa3ea2a53873ab9019a620
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.158320345194baf067-1b6c-46a0-81d7-a0cd0182254f.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.158320345194baf067-1b6c-46a0-81d7-a0cd0182254f.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 95a30f6c03092273cccace3c48e07414440e3e11032feef34bcce772d406c6c6
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.15832034519f098d4d-9126-42c3-b22e-d6e05bdf5f4d.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.15832034519f098d4d-9126-42c3-b22e-d6e05bdf5f4d.tmp
                                                                                                                        • Size 800B
                                                                                                                        • SHA256 a6b2ef80b409c5e33c132da5b836537990b9e0dff1afa9e73091a84b6b46b2c6
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.1583203451aabb2ef4-47f0-4f92-ac7e-93a0d0d43edc.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451aabb2ef4-47f0-4f92-ac7e-93a0d0d43edc.tmp
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 78312af99acf81577368e291055964b6ed1184553ff53daa1d229e437e1cb738
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.1583203451ac84905d-56f4-429d-880e-4926001d25d9.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451ac84905d-56f4-429d-880e-4926001d25d9.tmp
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 be3f2f03ab04a22878e037d0dc87bba9e5d31d4aa4e5bb133b1e1bb87d3205e5
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.1583203451c5a91518-8451-451b-8533-c0c8a4d3d43f.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451c5a91518-8451-451b-8533-c0c8a4d3d43f.tmp
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 d37241b34f97f4c8c8aa484ca783ab1f9352596b627e3cf1243be11f0958adcc
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.1583203451ca6733b9-64ce-492d-9705-59bc211ec560.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451ca6733b9-64ce-492d-9705-59bc211ec560.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 e299621a114b005caf15108c329c343ac14453eb6ba5d2c1ae570c53f46fdaf8
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.1583203451cbdb8345-22c1-4dce-a79e-43d3f104f208.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451cbdb8345-22c1-4dce-a79e-43d3f104f208.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 348310b076af072c1fa30e7e7c74dc2496fa891f0f8b4913d026d474cfa504b7
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.1583203451d08004b7-ffae-4af8-b032-854c7047b41b.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451d08004b7-ffae-4af8-b032-854c7047b41b.tmp
                                                                                                                        • Size 984B
                                                                                                                        • SHA256 fc106f106113d6baceacc7661f77fddbd55f13ebcbaa069200e583c8db51bcd2
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.1583203451de3354dd-99f0-4f85-ad2a-bb0420ece161.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451de3354dd-99f0-4f85-ad2a-bb0420ece161.tmp
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 052a9dde51527dc8d002f97836fab1b49dab30bbfe40c99149188e6e408127fc
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.1583203451fa51720d-2ef4-4b7b-a83f-94951fcd1a6d.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451fa51720d-2ef4-4b7b-a83f-94951fcd1a6d.tmp
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 2c984ad713bf973697b9400e38345be38dc05c7bd63ff834f73090f43c03bb09
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.0.1583203451feda5175-5bb8-4c03-8f20-4804340e8787.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.0.1583203451feda5175-5bb8-4c03-8f20-4804340e8787.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 4da70104b37da03c55cfd8c8096a5ffeb9696e17b966c9b07dcd3e9b512d0d14
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.1.2063114762

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762
                                                                                                                        • Size 171B
                                                                                                                        • SHA256 1ad41c0baa66f898d10dbc4f713209637a281c898c16394f82e81dcf9ae5b69a
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.1.2063114762379c529d-a1b8-495e-a73b-c3dbec6c193f.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762379c529d-a1b8-495e-a73b-c3dbec6c193f.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 3d5740340f765944da7a59a8e9e2cec1b7e8e6f89bad832f4a0fdc7acdfde6b9
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.1.206311476246353797-f3eb-45b2-b3ae-969d37652c98.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.206311476246353797-f3eb-45b2-b3ae-969d37652c98.tmp
                                                                                                                        • Size 576B
                                                                                                                        • SHA256 47b7caa6a9c3ef7f1c4761310b747ec5dbe6e2bd01cef1000f4904182c73dfa4
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.1.206311476275e10fde-0b45-4d8f-a26e-9365b0c20b77.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.206311476275e10fde-0b45-4d8f-a26e-9365b0c20b77.tmp
                                                                                                                        • Size 851B
                                                                                                                        • SHA256 7cf76f9255cbdf12c7de178336db6bf8f24517c0322d9de471892de06646f1ba
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.1.2063114762939ea9f7-f7b5-4812-9c59-450560eabfa7.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762939ea9f7-f7b5-4812-9c59-450560eabfa7.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 6d563ce187537c8101af21e3c048d95ba544326ad0d36f724620e247b836345e
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.1.20631147629ecf8365-8cb9-4e3f-8ab7-f3a3d7a75e0d.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.20631147629ecf8365-8cb9-4e3f-8ab7-f3a3d7a75e0d.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 a52844cc50a3e94abc924305f19c47a207de0f03097c77f10bf0238eae8f1a1e
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.1.2063114762a4f366b9-4a4d-4df0-a4f1-ef34fa2afbf2.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762a4f366b9-4a4d-4df0-a4f1-ef34fa2afbf2.tmp
                                                                                                                        • Size 200B
                                                                                                                        • SHA256 cc2668ac34b8cabf03c7002aa9cc76292103c846a1b823595ff119bf81817c6a
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.1.2063114762ab615a00-4acc-408a-922f-cd5c59002e11.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762ab615a00-4acc-408a-922f-cd5c59002e11.tmp
                                                                                                                        • Size 674B
                                                                                                                        • SHA256 855696731fb52d33787128f4297c1c8264acbe47b87d680041a971e761eb1aaf
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.1.2063114762c89e9b2e-991c-4617-880d-54994ad6021e.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762c89e9b2e-991c-4617-880d-54994ad6021e.tmp
                                                                                                                        • Size 279B
                                                                                                                        • SHA256 139222cf9f282ff69779613c34e2b20cc7805e3a2a1e0f0c169f0eba16a49448
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.1.2063114762c9fe62be-4058-44f5-848d-01f585fbcabb.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762c9fe62be-4058-44f5-848d-01f585fbcabb.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 2b8be7bb37f4f4107a76851344923d5fe599c47f88a22d097a972197538bf287
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.1.2063114762d3e6f2ea-89d5-49b4-956e-548ad3db2208.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762d3e6f2ea-89d5-49b4-956e-548ad3db2208.tmp
                                                                                                                        • Size 945B
                                                                                                                        • SHA256 055879e654b61688e098c4d43046438d96a3a90c09dc3e7c33dc0b0f0c0a8a29
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.1.2063114762d731bef6-0b2f-4360-8ce2-f93ebd994e40.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762d731bef6-0b2f-4360-8ce2-f93ebd994e40.tmp
                                                                                                                        • Size 483B
                                                                                                                        • SHA256 c47ceb478d8dc4402a8e164861e61b5d7adf0b4862b4a043fd2ccd3730cfb186
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.1.2063114762db13acd4-5e7e-45fe-bf16-cd4b0c4900a5.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762db13acd4-5e7e-45fe-bf16-cd4b0c4900a5.tmp
                                                                                                                        • Size 764B
                                                                                                                        • SHA256 aef40b5c43ed006563e01dae04bf375e60b5403026305e081ccc444c89d854cf
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.1.2063114762f025a6b6-2940-49a0-9f36-b463c1b5efa3.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762f025a6b6-2940-49a0-9f36-b463c1b5efa3.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 804a362f31f3c72f644fde6b53df8e4fb1381f5e4ac22b506d5b46190b8c8acd
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        ssdfp6892.1.2063114762f1fd114b-8d95-46bf-8f8d-b8d1359a6c72.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6892.1.2063114762f1fd114b-8d95-46bf-8f8d-b8d1359a6c72.tmp
                                                                                                                        • Size 1KB
                                                                                                                        • SHA256 23593a0aafc73f052bc778df8eecfc77891bd48b136f693dc67616ac30c02cc0
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        suggestions_cache.jsondd60be6a-0f7c-4b1b-8d64-447bc7e8493a.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.jsondd60be6a-0f7c-4b1b-8d64-447bc7e8493a.tmp
                                                                                                                        • Size 652KB
                                                                                                                        • SHA256 1b7341b6196f0bb3a8217bcd76ea19433890bc29b9e995e980f35aff324f6399
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        Local State5e1e479e-c7fa-431a-a022-b975d5d834de.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State5e1e479e-c7fa-431a-a022-b975d5d834de.tmp
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 f4dcb2a43bbbef17691b4de0ada51491a7f1bad1808bc4eef875da419eaa56e7
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        Local Statec637fe7c-9779-4bd7-8450-cda34448a173.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local Statec637fe7c-9779-4bd7-8450-cda34448a173.tmp
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 193a70aafd4869ca9da01693be8ae86618c1a88b1e0f97bfcea3d828e8791d72
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        Local Statee08854a4-9f9f-4fc3-80d5-d303f48c7a11.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local Statee08854a4-9f9f-4fc3-80d5-d303f48c7a11.tmp
                                                                                                                        • Size 3KB
                                                                                                                        • SHA256 7e780da0b169e11c0e078f22eddfc401c52a57c0208eb462ee62e3d0cc7bd7aa
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        VariationsSeedV28c3abb2e-defc-4dce-846c-0f03216f2b35.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV28c3abb2e-defc-4dce-846c-0f03216f2b35.tmp
                                                                                                                        • Size 19B
                                                                                                                        • SHA256 1560b22b2264f7cb6b7f6910164813f76c5e8a06fb1acf85b375e687ee49c1ad
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        VariationsSeedV2d6bb8034-8c47-4eac-9602-f836deef0116.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\VariationsSeedV2d6bb8034-8c47-4eac-9602-f836deef0116.tmp
                                                                                                                        • Size 11B
                                                                                                                        • SHA256 b4cc4174735c28360b9081be3c3d0552d8a4b3cdb54431ac00ed0d622bab6296
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        assistant_prefs.json77eb0110-f80c-4566-8dcb-72c46380d17d.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json77eb0110-f80c-4566-8dcb-72c46380d17d.tmp
                                                                                                                        • Size 151B
                                                                                                                        • SHA256 c17d06886cce19bc817b8b3d1d5c8ec4aa35bb902e9ca2cde86268260fbb3e9f
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        metadata.jsone49d4c3b-26b6-43e9-9023-016f62240a7f.tmp

                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\extensions_crx_cache\metadata.jsone49d4c3b-26b6-43e9-9023-016f62240a7f.tmp
                                                                                                                        • Size 13B
                                                                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                        opera-one.jpg

                                                                                                                        • Path C:\Windows\SystemTemp\scoped_dir6892_1190386881\opera-one.jpg
                                                                                                                        • Size 194KB
                                                                                                                        • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        persona.ini

                                                                                                                        • Path C:\Windows\SystemTemp\scoped_dir6892_1190386881\persona.ini
                                                                                                                        • Size 207B
                                                                                                                        • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        opera-one-dark.jpg

                                                                                                                        • Path C:\Windows\SystemTemp\scoped_dir6892_341129755\opera-one-dark.jpg
                                                                                                                        • Size 349KB
                                                                                                                        • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                        persona.ini

                                                                                                                        • Path C:\Windows\SystemTemp\scoped_dir6892_341129755\persona.ini
                                                                                                                        • Size 217B
                                                                                                                        • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                        memory/5312-538-0x00007FFD40FC0000-0x00007FFD40FC1000-memory.dmp

                                                                                                                        memory/5312-539-0x00007FFD417E0000-0x00007FFD417E1000-memory.dmp