Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    901s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    17/04/2026, 22:25

General

  • Target
    http://discord.com/app
  • Sample260417-2ce24acy6s

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Checks computer location settings 2 TTPs 51 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 3 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Contacts third-party web service commonly abused for C2 1 TTPs 11 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 7 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 7 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 62 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://discord.com/app
    1⤵
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3796
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffbc9bec188,0x7ffbc9bec194,0x7ffbc9bec1a0
      2⤵
        PID:1676
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1824,i,3894024362847701428,3165762187207885171,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:3
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:4344
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,16158657470013558166,7235820056956979890,262144 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:2
        2⤵
          PID:4396
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,1159347728887763738,16585123369033456427,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=2840 /prefetch:8
          2⤵
            PID:3460
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,17496825435136966389,3660861173936515704,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
            2⤵
              PID:3904
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,3000801434439719196,1323207733831355581,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
              2⤵
                PID:4032
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,7998884456193570428,17042243455397949765,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:1
                2⤵
                  PID:3684
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4176,i,6594499574176285022,951991844316084754,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:2
                  2⤵
                    PID:1076
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,13948544130486423928,15879735858967465603,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
                    2⤵
                      PID:4292
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5240,i,13459069049557730792,226684021481478483,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:1
                      2⤵
                        PID:4984
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,17920538797962915011,7987802311696568756,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
                        2⤵
                          PID:3368
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,12585744474912688947,17676647709084434217,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:8
                          2⤵
                            PID:980
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3488,i,9612169648981180111,3921782716542838753,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:8
                            2⤵
                              PID:4896
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6396,i,15369611574234483172,6397605368886389074,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:8
                              2⤵
                              • Modifies registry class
                              PID:4256
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,16464991989607831930,16376911320316991089,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:8
                              2⤵
                                PID:2436
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,1902371446630446133,4981601590292761880,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:8
                                2⤵
                                  PID:3584
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,1902371446630446133,4981601590292761880,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:8
                                  2⤵
                                    PID:1848
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,12059319704325894391,8657777031088501005,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:8
                                    2⤵
                                      PID:4404
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6748,i,9168591902403022787,892195791439225489,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=7024 /prefetch:8
                                      2⤵
                                        PID:4348
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3532,i,12474280939565016492,13410590696746493476,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:8
                                        2⤵
                                          PID:4492
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5492,i,1801268912593965683,8006335707667864423,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
                                          2⤵
                                            PID:4292
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,7722598714597517305,1133837919286517702,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
                                            2⤵
                                              PID:4560
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,13148431794844043491,7049685090106700010,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:8
                                              2⤵
                                                PID:5720
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3496,i,2551279989931930312,2721132971012185361,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:8
                                                2⤵
                                                  PID:5728
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,10658095252507096549,16926547833224031422,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:8
                                                  2⤵
                                                    PID:5736
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3576,i,1394657601390066216,9851246189713740145,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:8
                                                    2⤵
                                                      PID:6024
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5728,i,16950481813479697911,4385625554712874443,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6880 /prefetch:8
                                                      2⤵
                                                        PID:1228
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,10734611390605948157,286488164771306672,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6880 /prefetch:8
                                                        2⤵
                                                          PID:4688
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,7017100849612806763,9592167988412225515,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
                                                          2⤵
                                                            PID:3528
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4176,i,6791252946759823283,16463963252433657590,262144 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:8
                                                            2⤵
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            PID:4112
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,6944975651549985724,14665810660178353029,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=3976 /prefetch:8
                                                            2⤵
                                                              PID:5812
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=3972,i,16150812387787427289,11230087776049666518,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:1
                                                              2⤵
                                                                PID:3804
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3724,i,334130575018100778,4681779512960597990,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
                                                                2⤵
                                                                  PID:4408
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=3768,i,13695718985432389479,6248835685489932141,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:1
                                                                  2⤵
                                                                    PID:4260
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,6328576692181636128,6946134125328577937,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:8
                                                                    2⤵
                                                                      PID:5136
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6680,i,12882490178187374615,17596284106725768903,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
                                                                      2⤵
                                                                        PID:5140
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7024,i,4369406532455057783,10674662288868986984,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
                                                                        2⤵
                                                                          PID:4500
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,1893985791258388180,8097267832643194442,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:8
                                                                          2⤵
                                                                            PID:1472
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=5604,i,10502525226342217391,4942199069170824366,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:1
                                                                            2⤵
                                                                              PID:5644
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,2911124044372881682,18033142419338055848,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:8
                                                                              2⤵
                                                                                PID:1164
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=7228,i,14190661097110552221,6545668919455281465,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=7244 /prefetch:1
                                                                                2⤵
                                                                                  PID:2580
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=7360,i,852849278009801519,16830407704212511233,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:1
                                                                                  2⤵
                                                                                    PID:5532
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7536,i,4314782502457269764,2484235194116260768,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:8
                                                                                    2⤵
                                                                                      PID:4984
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=7632,i,16450648413807787793,13707974686013756492,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:1
                                                                                      2⤵
                                                                                        PID:3728
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7864,i,12342342813997580354,10679161224713920535,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=7596 /prefetch:8
                                                                                        2⤵
                                                                                          PID:2192
                                                                                        • C:\Users\Admin\Downloads\OperaSetup.exe
                                                                                          "C:\Users\Admin\Downloads\OperaSetup.exe"
                                                                                          2⤵
                                                                                          • Executes dropped EXE
                                                                                          • System Location Discovery: System Language Discovery
                                                                                          PID:5360
                                                                                          • C:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exe
                                                                                            C:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exe --server-tracking-blob=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
                                                                                            3⤵
                                                                                            • Downloads MZ/PE file
                                                                                            • Executes dropped EXE
                                                                                            • Enumerates connected drives
                                                                                            • Modifies system certificate store
                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                            PID:5960
                                                                                            • C:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exe
                                                                                              C:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x7ff6db74b6d8,0x7ff6db74b6e4,0x7ff6db74b6f0
                                                                                              4⤵
                                                                                              • Executes dropped EXE
                                                                                              PID:5932
                                                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\installer.exe
                                                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\installer.exe" --version
                                                                                              4⤵
                                                                                              • Executes dropped EXE
                                                                                              PID:5968
                                                                                            • C:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exe
                                                                                              "C:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=5960 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_20260417233106" --session-guid=db99740f-8181-4bce-a646-e8ea47cf33ac --server-tracking-blob="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 " --desktopshortcut=1 --wait-for-package --initial-proc-handle=1409000000000000
                                                                                              4⤵
                                                                                              • Executes dropped EXE
                                                                                              • Enumerates connected drives
                                                                                              PID:2924
                                                                                              • C:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exe
                                                                                                C:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x288,0x28c,0x29c,0x264,0x2a0,0x7ff6db74b6d8,0x7ff6db74b6e4,0x7ff6db74b6f0
                                                                                                5⤵
                                                                                                • Executes dropped EXE
                                                                                                PID:4408
                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\installer.exe
                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\installer.exe" --backend --initial-pid=5960 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=1 --general-interests=1 --general-location=1 --personalized-content=1 --personalized-ads=1 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061" --session-guid=db99740f-8181-4bce-a646-e8ea47cf33ac --server-tracking-blob="NjQ5NDdiZTQwYTM5NDgyNDMwYjczMmM4ZGM4YzUzNjU0MDJjM2VkNDAxNGUwNTQxZjZiNzYwZjYwYWU3NTQ5ODp7ImNvdW50cnkiOiJHQiIsImZhc3Rfb25ib2FyZGluZyI6e30sImh0dHBfcmVmZXJyZXIiOiJodHRwczovL3d3dy5vcGVyYS5jb20vIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYVNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhIn0sInF1ZXJ5IjoiL29wZXJhL3N0YWJsZS93aW5kb3dzP3V0bV9zb3VyY2U9JTI4ZGlyZWN0JTI5JnV0bV9tZWRpdW09ZG9jJnV0bV9jYW1wYWlnbj0lMjhkaXJlY3QlMjkmaHR0cF9yZWZlcnJlcj1taXNzaW5nJnV0bV9zaXRlPW9wZXJhX2NvbSZ1dG1fbGFzdHBhZ2U9b3BlcmEuY29tJTJGJmRsX3Rva2VuPTE1MjAzNDE4Iiwic3lzdGVtIjp7InBsYXRmb3JtIjp7ImFyY2giOiJ4ODZfNjQiLCJvcHN5cyI6IldpbmRvd3MiLCJvcHN5cy12ZXJzaW9uIjoiMTAiLCJwYWNrYWdlIjoiRVhFIn19LCJ0aW1lc3RhbXAiOiIxNzc2NDY1MDYzLjA1MzciLCJ1c2VyYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTM5LjAuMC4wIFNhZmFyaS81MzcuMzYgRWRnLzEzOS4wLjAuMCIsInV0bSI6eyJjYW1wYWlnbiI6IihkaXJlY3QpIiwibGFzdHBhZ2UiOiJvcGVyYS5jb20vIiwibWVkaXVtIjoiZG9jIiwic2l0ZSI6Im9wZXJhX2NvbSIsInNvdXJjZSI6IihkaXJlY3QpIn0sInV1aWQiOiIyYjg1Y2YxMS1jZjkzLTQzODEtOTc5Yi1kOGRiYmQyMDVlYTAifQ== " --desktopshortcut=1 --install-subfolder=130.0.5847.41
                                                                                                5⤵
                                                                                                • Executes dropped EXE
                                                                                                • Enumerates connected drives
                                                                                                • Enumerates system info in registry
                                                                                                • Modifies registry class
                                                                                                • Suspicious use of FindShellTrayWindow
                                                                                                • Suspicious use of SendNotifyMessage
                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                PID:3676
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\installer.exe
                                                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff6c214b6d8,0x7ff6c214b6e4,0x7ff6c214b6f0
                                                                                                  6⤵
                                                                                                  • Executes dropped EXE
                                                                                                  PID:4776
                                                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
                                                                                                  6⤵
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  • Adds Run key to start application
                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                  • Modifies Internet Explorer settings
                                                                                                  PID:5892
                                                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x240,0x244,0x248,0x21c,0x24c,0x7e4040,0x7e404c,0x7e4058
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Loads dropped DLL
                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                    PID:5884
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Loads dropped DLL
                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                    PID:3524
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                                                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x1274040,0x127404c,0x1274058
                                                                                                      8⤵
                                                                                                      • Executes dropped EXE
                                                                                                      • Loads dropped DLL
                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                      PID:2596
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                                                                                                      8⤵
                                                                                                      • Executes dropped EXE
                                                                                                      • Loads dropped DLL
                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                      PID:6068
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                        9⤵
                                                                                                        • Executes dropped EXE
                                                                                                        • Loads dropped DLL
                                                                                                        PID:940
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe
                                                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x218,0x1f0,0x1ec,0x250,0x1c0,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f6250
                                                                                                          10⤵
                                                                                                          • Executes dropped EXE
                                                                                                          PID:1884
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                        9⤵
                                                                                                        • Executes dropped EXE
                                                                                                        • Loads dropped DLL
                                                                                                        PID:2664
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe
                                                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f6250
                                                                                                          10⤵
                                                                                                          • Executes dropped EXE
                                                                                                          PID:632
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x66c830,0x66c83c,0x66c848
                                                                                                        9⤵
                                                                                                        • Executes dropped EXE
                                                                                                        • Loads dropped DLL
                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                        PID:1028
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                          10⤵
                                                                                                          • Executes dropped EXE
                                                                                                          • Loads dropped DLL
                                                                                                          PID:4168
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe
                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x254,0x25c,0x260,0x258,0x264,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f6250
                                                                                                            11⤵
                                                                                                            • Executes dropped EXE
                                                                                                            PID:904
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                          10⤵
                                                                                                          • Executes dropped EXE
                                                                                                          • Loads dropped DLL
                                                                                                          PID:5772
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe
                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f6250
                                                                                                            11⤵
                                                                                                            • Executes dropped EXE
                                                                                                            PID:4432
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                          10⤵
                                                                                                          • Executes dropped EXE
                                                                                                          • Loads dropped DLL
                                                                                                          • Enumerates system info in registry
                                                                                                          PID:2368
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe
                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x254,0x258,0x260,0x250,0x264,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f6250
                                                                                                            11⤵
                                                                                                            • Executes dropped EXE
                                                                                                            PID:5296
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\de932af914ba00303d4a2778a383ac9c831101e2.crx"
                                                                                                  6⤵
                                                                                                  • Checks computer location settings
                                                                                                  • Executes dropped EXE
                                                                                                  • Loads dropped DLL
                                                                                                  • Adds Run key to start application
                                                                                                  • Drops file in Program Files directory
                                                                                                  • Checks processor information in registry
                                                                                                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                                  PID:6000
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe
                                                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x25c,0x238,0x234,0x258,0x260,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f6250
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    PID:3280
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1720,i,6980611170067924315,7613963493671754566,262144 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1912 /prefetch:2
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Loads dropped DLL
                                                                                                    PID:3828
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2140,i,14005199721005361527,10646887017531317140,524288 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2152 /prefetch:3
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Loads dropped DLL
                                                                                                    • System Time Discovery
                                                                                                    PID:4984
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2376,i,9094998851689423622,1884602400617057595,524288 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2368 /prefetch:8
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Loads dropped DLL
                                                                                                    PID:6240
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3568,i,18367838294113041164,15832130297743739130,2097152 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3864 /prefetch:2
                                                                                                    7⤵
                                                                                                    • Checks computer location settings
                                                                                                    • Executes dropped EXE
                                                                                                    • Loads dropped DLL
                                                                                                    PID:6804
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4140,i,17110889731543556005,17290194519979209948,524288 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3488 /prefetch:8
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Loads dropped DLL
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:6892
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3348,i,5328471809933988315,8318756117902846803,2097152 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4240 /prefetch:2
                                                                                                    7⤵
                                                                                                    • Checks computer location settings
                                                                                                    • Executes dropped EXE
                                                                                                    • Loads dropped DLL
                                                                                                    PID:6904
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4244,i,12412328221703917647,17592517215202976131,524288 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4628 /prefetch:8
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Loads dropped DLL
                                                                                                    PID:6460
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3360,i,1264197103170418688,16334300240345938305,524288 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4816 /prefetch:8
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Loads dropped DLL
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:6528
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4988,i,3235254508771027138,10122728068894087497,2097152 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5040 /prefetch:2
                                                                                                    7⤵
                                                                                                    • Checks computer location settings
                                                                                                    • Executes dropped EXE
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:6548
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5184,i,15879696701201846027,8596063884324507783,524288 --field-trial-handle=1916,i,3336123598489047169,646204364106616500,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1932,i,14273063438474686780,16148269273498502852,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5200 /prefetch:8
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    PID:6596
                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                                                                                                  6⤵
                                                                                                  • Checks computer location settings
                                                                                                  • Executes dropped EXE
                                                                                                  • Adds Run key to start application
                                                                                                  • Drops file in Program Files directory
                                                                                                  • Checks processor information in registry
                                                                                                  • Enumerates system info in registry
                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                  • Suspicious use of SendNotifyMessage
                                                                                                  PID:6368
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe
                                                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffb93346230,0x7ffb93346240,0x7ffb93346250
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    PID:6416
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1936,i,5682179934988146965,18152702999787999748,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2072 /prefetch:3
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • System Time Discovery
                                                                                                    PID:7332
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1724,i,3436076483671458629,965903417624095949,262144 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2044 /prefetch:2
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    PID:7344
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2384,i,7460625347081260525,15915265683278759119,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2608 /prefetch:8
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:7472
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2700,i,5071151323154492240,12165885502538021892,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2916 /prefetch:8
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    PID:7692
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2724,i,12468644929775748558,13968049672096074646,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=2932 /prefetch:8
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:7728
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3184,i,15533474212747465397,8917684769816374822,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3196 /prefetch:1
                                                                                                    7⤵
                                                                                                    • Checks computer location settings
                                                                                                    • Executes dropped EXE
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:7764
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2748,i,7703827220429335957,6163620865696536107,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=2972 /prefetch:8
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:7812
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2760,i,256182864099366678,2884171943731154980,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=2992 /prefetch:8
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:7520
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2736,i,1995221869587018522,17818268302304705836,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=2952 /prefetch:8
                                                                                                    7⤵
                                                                                                    • Executes dropped EXE
                                                                                                    • Enumerates system info in registry
                                                                                                    PID:7528
                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2784,i,11524102398188721356,12428356159645489632,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3032 /prefetch:8
                                                                                                    7⤵
                                                                                                      PID:9208
                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2772,i,16778675835266754371,7382883657428571618,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3012 /prefetch:8
                                                                                                      7⤵
                                                                                                        PID:6976
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_gx_splash.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                                                                                                        7⤵
                                                                                                        • Suspicious use of AdjustPrivilegeToken
                                                                                                        PID:8000
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4672,i,8932736595794964853,18299079906838996948,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4676 /prefetch:2
                                                                                                        7⤵
                                                                                                        • Checks computer location settings
                                                                                                        PID:8172
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4832,i,7151517422912675215,7970025285182083166,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4848 /prefetch:1
                                                                                                        7⤵
                                                                                                        • Checks computer location settings
                                                                                                        PID:6236
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5148,i,222522013789410261,14451321584694362735,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5160 /prefetch:1
                                                                                                        7⤵
                                                                                                        • Checks computer location settings
                                                                                                        PID:8256
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5292,i,11111211296280163683,17411068252596766534,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5304 /prefetch:1
                                                                                                        7⤵
                                                                                                        • Checks computer location settings
                                                                                                        PID:8320
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6340,i,16590943758787649918,15378985784264775999,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6336 /prefetch:2
                                                                                                        7⤵
                                                                                                        • Checks computer location settings
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:6940
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6716,i,2835609818477126500,2795508950844284249,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6880 /prefetch:2
                                                                                                        7⤵
                                                                                                        • Checks computer location settings
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:7068
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6816,i,16431259955918462603,2917756383728910173,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6900 /prefetch:2
                                                                                                        7⤵
                                                                                                        • Checks computer location settings
                                                                                                        • Enumerates system info in registry
                                                                                                        PID:7116
                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5740,i,3491678648922620270,455204490509780534,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6368 /prefetch:8
                                                                                                        7⤵
                                                                                                          PID:9164
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7224,i,999317775355942825,14202216968060462827,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7256 /prefetch:8
                                                                                                          7⤵
                                                                                                          • Enumerates system info in registry
                                                                                                          PID:9180
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7392,i,8497808713741608103,18413801014117874170,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7408 /prefetch:8
                                                                                                          7⤵
                                                                                                          • Enumerates system info in registry
                                                                                                          PID:6452
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7416,i,5329540861013116815,9140903257012694253,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7548 /prefetch:8
                                                                                                          7⤵
                                                                                                          • Enumerates system info in registry
                                                                                                          PID:9192
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7556,i,14127896210799143793,14900801313144680967,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7688 /prefetch:8
                                                                                                          7⤵
                                                                                                          • Enumerates system info in registry
                                                                                                          PID:9200
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7696,i,424516001985011006,4592774657439357381,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7828 /prefetch:8
                                                                                                          7⤵
                                                                                                          • Enumerates system info in registry
                                                                                                          PID:7088
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7396,i,10884774025859271064,7998175074982526962,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=8068 /prefetch:8
                                                                                                          7⤵
                                                                                                          • Enumerates system info in registry
                                                                                                          PID:6808
                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8060,i,1599633363652649409,8260157604107996069,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8044 /prefetch:8
                                                                                                          7⤵
                                                                                                            PID:7084
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8320,i,17831294971867414580,14484393035448160185,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8332 /prefetch:8
                                                                                                            7⤵
                                                                                                            • Enumerates system info in registry
                                                                                                            PID:6712
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8440,i,8350989025046054643,11225801882765228193,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8452 /prefetch:8
                                                                                                            7⤵
                                                                                                            • Enumerates system info in registry
                                                                                                            PID:6832
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8460,i,10481318805404990513,4771298706938790271,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8592 /prefetch:8
                                                                                                            7⤵
                                                                                                            • Enumerates system info in registry
                                                                                                            PID:6336
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8632,i,1512236702305604764,14392363769111189099,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8716 /prefetch:8
                                                                                                            7⤵
                                                                                                            • Enumerates system info in registry
                                                                                                            PID:6740
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8740,i,18122439310825617456,7961181810031163149,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8760 /prefetch:8
                                                                                                            7⤵
                                                                                                            • Enumerates system info in registry
                                                                                                            PID:6484
                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9004,i,3780441397390943550,5691763323153362877,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=9016 /prefetch:8
                                                                                                            7⤵
                                                                                                              PID:5876
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --metrics-shmem-handle=9192,i,404069721376119005,7188806588416737133,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9052 /prefetch:1
                                                                                                              7⤵
                                                                                                              • Checks computer location settings
                                                                                                              PID:6060
                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9360,i,13636240988738467914,9051644578199669382,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9380 /prefetch:8
                                                                                                              7⤵
                                                                                                                PID:6448
                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9172,i,10880533222526649267,153128423158134073,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9348 /prefetch:8
                                                                                                                7⤵
                                                                                                                  PID:6544
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9532,i,5851058966971796806,6628304016042546523,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9544 /prefetch:8
                                                                                                                  7⤵
                                                                                                                  • Enumerates system info in registry
                                                                                                                  PID:4144
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=9664,i,15636044676513709421,365491803334417392,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9676 /prefetch:2
                                                                                                                  7⤵
                                                                                                                  • Checks computer location settings
                                                                                                                  • Enumerates system info in registry
                                                                                                                  PID:7196
                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9860,i,4285249670541945550,5184488339635061769,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9020 /prefetch:8
                                                                                                                  7⤵
                                                                                                                    PID:4120
                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10188,i,10461486567952987068,12376585146291495330,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9552 /prefetch:8
                                                                                                                    7⤵
                                                                                                                      PID:9132
                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2816,i,16562180080078696737,8455464739378476880,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=5948 /prefetch:8
                                                                                                                      7⤵
                                                                                                                        PID:6632
                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10740,i,5039635665615277977,13494295043346921401,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10880 /prefetch:8
                                                                                                                        7⤵
                                                                                                                          PID:4216
                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10884,i,18426870342923417705,3883756651068854639,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=11040 /prefetch:8
                                                                                                                          7⤵
                                                                                                                            PID:6768
                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\installer.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\installer.exe" --fix-taskbar-pins
                                                                                                                            7⤵
                                                                                                                            • Enumerates system info in registry
                                                                                                                            PID:8540
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\installer.exe
                                                                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff6c214b6d8,0x7ff6c214b6e4,0x7ff6c214b6f0
                                                                                                                              8⤵
                                                                                                                                PID:8428
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3028,i,13718850239602390928,791941900554276531,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11212 /prefetch:8
                                                                                                                              7⤵
                                                                                                                              • Enumerates system info in registry
                                                                                                                              PID:8036
                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3044,i,4897838300367285324,2711479401836451782,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=3000 /prefetch:8
                                                                                                                              7⤵
                                                                                                                                PID:8756
                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                                                                                                                7⤵
                                                                                                                                • Enumerates system info in registry
                                                                                                                                PID:8928
                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                  C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff7a483c738,0x7ff7a483c744,0x7ff7a483c750
                                                                                                                                  8⤵
                                                                                                                                    PID:8912
                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=11172,i,16806928120397447372,14176864843722967834,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11036 /prefetch:1
                                                                                                                                  7⤵
                                                                                                                                  • Checks computer location settings
                                                                                                                                  PID:6868
                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6576,i,8311500041328640147,2923564374935971229,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=3044 /prefetch:8
                                                                                                                                  7⤵
                                                                                                                                    PID:6216
                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6520,i,10806024910529965990,346179138368782464,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=6644 /prefetch:8
                                                                                                                                    7⤵
                                                                                                                                      PID:8104
                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --metrics-shmem-handle=2996,i,5921436016620374574,15932706278898872039,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=3940 /prefetch:2
                                                                                                                                      7⤵
                                                                                                                                      • Checks computer location settings
                                                                                                                                      • Enumerates system info in registry
                                                                                                                                      PID:7652
                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5720,i,8636169674427638198,12914964157116430404,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=3312 /prefetch:8
                                                                                                                                      7⤵
                                                                                                                                        PID:2408
                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6588,i,5996290666818789457,2051812942896950609,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=3000 /prefetch:8
                                                                                                                                        7⤵
                                                                                                                                        • Enumerates system info in registry
                                                                                                                                        PID:6936
                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10748,i,462381184878767483,13590923570907704323,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=6556 /prefetch:8
                                                                                                                                        7⤵
                                                                                                                                          PID:6960
                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3924,i,8010767003946798612,3060395701343593887,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=10348 /prefetch:8
                                                                                                                                          7⤵
                                                                                                                                            PID:6208
                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10908,i,10227280258070562391,6166620581420479422,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=2676 /prefetch:8
                                                                                                                                            7⤵
                                                                                                                                              PID:7200
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=9700,i,3384237791018324893,6365927813345317389,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=10804 /prefetch:2
                                                                                                                                              7⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              • Enumerates system info in registry
                                                                                                                                              PID:6336
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=10740,i,10054260382054591501,2563669178033050274,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=11016 /prefetch:2
                                                                                                                                              7⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              PID:7704
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=8916,i,431255660420842553,9709180202717268384,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=8368 /prefetch:1
                                                                                                                                              7⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              PID:8688
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=11100,i,18169467280223193836,9456564534623042018,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=5584 /prefetch:1
                                                                                                                                              7⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              PID:8756
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=2780,i,14891744787993360071,11163130943740190536,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=11116 /prefetch:1
                                                                                                                                              7⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              PID:7456
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=3772,i,1831934071911194817,4150282355344931043,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=5696 /prefetch:1
                                                                                                                                              7⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              PID:4332
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=7476,i,1193535511693181209,2786826625919292548,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=7232 /prefetch:1
                                                                                                                                              7⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              • Enumerates system info in registry
                                                                                                                                              PID:8224
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=9224,i,17306731998358194328,5177115101773419251,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=2716 /prefetch:1
                                                                                                                                              7⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              PID:8156
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --enable-quic --message-loop-type-ui --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7540,i,17048284733875807596,9252987749969211732,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=8024 /prefetch:8
                                                                                                                                              7⤵
                                                                                                                                              • Modifies registry class
                                                                                                                                              PID:9024
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=7968,i,324391367903608,12230627338421654262,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=3708 /prefetch:1
                                                                                                                                              7⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              • Enumerates system info in registry
                                                                                                                                              PID:9108
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7376,i,8348618308931804128,16318166923634575795,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=7224 /prefetch:8
                                                                                                                                              7⤵
                                                                                                                                              • Modifies registry class
                                                                                                                                              PID:6992
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=7676,i,1519386756618896714,8692677900865817910,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=3788 /prefetch:1
                                                                                                                                              7⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              PID:8748
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=9552,i,10187338076759490515,5431365801608102341,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=9724 /prefetch:1
                                                                                                                                              7⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              PID:6156
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=5692,i,3723577677626234253,4634457682938356701,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=9604 /prefetch:2
                                                                                                                                              7⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              • Enumerates system info in registry
                                                                                                                                              PID:1116
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=3712,i,865449475143043557,17778436253048957836,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=7880 /prefetch:2
                                                                                                                                              7⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              • Enumerates system info in registry
                                                                                                                                              PID:6440
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=9740,i,3317443409513885513,325429085269002432,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=7428 /prefetch:1
                                                                                                                                              7⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              • Enumerates system info in registry
                                                                                                                                              PID:4804
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=7420,i,17636074516595570913,3018121729492932162,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=7844 /prefetch:1
                                                                                                                                              7⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              PID:7420
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9528,i,16572999480025243583,2126180659196914477,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=3756 /prefetch:8
                                                                                                                                              7⤵
                                                                                                                                              • Enumerates system info in registry
                                                                                                                                              PID:4472
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=10780,i,9995259337304108948,4971198772722078521,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=9252 /prefetch:1
                                                                                                                                              7⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              PID:1664
                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8168,i,5967112348424358217,607717845678388692,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=10796 /prefetch:8
                                                                                                                                              7⤵
                                                                                                                                                PID:5588
                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=7904,i,7357860798753649540,9952327487079952373,262144 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=6892 /prefetch:8
                                                                                                                                                7⤵
                                                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                                                PID:7328
                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=5704,i,6832392350323411378,314188361673663697,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=6884 /prefetch:1
                                                                                                                                                7⤵
                                                                                                                                                • Checks computer location settings
                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                PID:2876
                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7972,i,17918042208099435366,13102229810244175454,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=6660 /prefetch:8
                                                                                                                                                7⤵
                                                                                                                                                  PID:2188
                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=3684,i,16467696048406859064,947828002353637192,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709063149303112 --mojo-platform-channel-handle=11116 /prefetch:1
                                                                                                                                                  7⤵
                                                                                                                                                  • Checks computer location settings
                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                  PID:7880
                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7268,i,4969871868781584736,4706906439129715960,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709064086344961 --mojo-platform-channel-handle=3760 /prefetch:8
                                                                                                                                                  7⤵
                                                                                                                                                  • Enumerates system info in registry
                                                                                                                                                  PID:8096
                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=11208,i,12027037743662828668,10321700503920498401,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709065023386810 --mojo-platform-channel-handle=10884 /prefetch:2
                                                                                                                                                  7⤵
                                                                                                                                                  • Checks computer location settings
                                                                                                                                                  PID:5016
                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9652,i,2883116370219806172,1292762850024591521,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709065960428659 --mojo-platform-channel-handle=5580 /prefetch:8
                                                                                                                                                  7⤵
                                                                                                                                                    PID:6904
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=10804,i,3417761883130368403,1059438331314434938,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709066897470508 --mojo-platform-channel-handle=7904 /prefetch:2
                                                                                                                                                    7⤵
                                                                                                                                                    • Checks computer location settings
                                                                                                                                                    • Enumerates system info in registry
                                                                                                                                                    PID:4500
                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9712,i,13761583603225515583,3493139282339774634,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709067834512357 --mojo-platform-channel-handle=11236 /prefetch:8
                                                                                                                                                    7⤵
                                                                                                                                                      PID:4824
                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6640,i,14032240299811793906,12542750156273887456,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709068771554206 --mojo-platform-channel-handle=3980 /prefetch:8
                                                                                                                                                      7⤵
                                                                                                                                                        PID:6528
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=9556,i,14819707447162715991,5187421432673889366,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709069708596055 --mojo-platform-channel-handle=4060 /prefetch:2
                                                                                                                                                        7⤵
                                                                                                                                                        • Checks computer location settings
                                                                                                                                                        • Enumerates system info in registry
                                                                                                                                                        PID:1328
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=9728,i,6880085788797629384,12534490672234867104,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709070645637904 --mojo-platform-channel-handle=10948 /prefetch:2
                                                                                                                                                        7⤵
                                                                                                                                                        • Checks computer location settings
                                                                                                                                                        PID:4156
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=3940,i,6225239058316385710,8929268635240931452,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709071582679753 --mojo-platform-channel-handle=9652 /prefetch:2
                                                                                                                                                        7⤵
                                                                                                                                                        • Checks computer location settings
                                                                                                                                                        PID:6164
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=7560,i,18425461156038287899,17890776413072660968,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709072519721602 --mojo-platform-channel-handle=5580 /prefetch:1
                                                                                                                                                        7⤵
                                                                                                                                                        • Checks computer location settings
                                                                                                                                                        PID:5788
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=7828,i,9702706805843769008,5733434504087534285,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709073456763451 --mojo-platform-channel-handle=11116 /prefetch:1
                                                                                                                                                        7⤵
                                                                                                                                                        • Checks computer location settings
                                                                                                                                                        PID:6324
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3704,i,17736281712858178361,18285700233500521884,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709074393805300 --mojo-platform-channel-handle=10196 /prefetch:8
                                                                                                                                                        7⤵
                                                                                                                                                          PID:5704
                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --metrics-shmem-handle=6504,i,11846850140340564147,724930774297673109,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709075330847149 --mojo-platform-channel-handle=7904 /prefetch:1
                                                                                                                                                          7⤵
                                                                                                                                                          • Checks computer location settings
                                                                                                                                                          • Enumerates system info in registry
                                                                                                                                                          PID:8768
                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3292,i,9954800374462936810,15558431842744841866,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709076267888998 --mojo-platform-channel-handle=6632 /prefetch:8
                                                                                                                                                          7⤵
                                                                                                                                                            PID:9144
                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7828,i,9253808112210078322,215726920758978615,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709077204930847 --mojo-platform-channel-handle=3760 /prefetch:8
                                                                                                                                                            7⤵
                                                                                                                                                              PID:836
                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6632,i,15864522940245161994,4721504474837033287,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709078141972696 --mojo-platform-channel-handle=7944 /prefetch:8
                                                                                                                                                              7⤵
                                                                                                                                                              • Enumerates system info in registry
                                                                                                                                                              PID:5228
                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9572,i,14322523974165475242,11628712869078057855,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709079079014545 --mojo-platform-channel-handle=6356 /prefetch:8
                                                                                                                                                              7⤵
                                                                                                                                                              • Enumerates system info in registry
                                                                                                                                                              PID:6552
                                                                                                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11164,i,16745321346224830247,15204267174543047147,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709080016056394 --mojo-platform-channel-handle=3000 /prefetch:8
                                                                                                                                                              7⤵
                                                                                                                                                                PID:7008
                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --metrics-shmem-handle=8512,i,5757959139605510544,7423667151547257285,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709080953098243 --mojo-platform-channel-handle=8164 /prefetch:2
                                                                                                                                                                7⤵
                                                                                                                                                                • Checks computer location settings
                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                PID:8120
                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=11116,i,5137871398912389325,11173343846639820124,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709081890140092 --mojo-platform-channel-handle=8620 /prefetch:1
                                                                                                                                                                7⤵
                                                                                                                                                                • Checks computer location settings
                                                                                                                                                                PID:2476
                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=3956,i,8011964140697573898,4234237638831444526,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709082827181941 --mojo-platform-channel-handle=8396 /prefetch:1
                                                                                                                                                                7⤵
                                                                                                                                                                • Checks computer location settings
                                                                                                                                                                • Enumerates system info in registry
                                                                                                                                                                PID:648
                                                                                                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=proxy_resolver.mojom.ProxyResolverFactory --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3780,i,11887720844131625138,15291430374978457839,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709083764223790 --mojo-platform-channel-handle=8680 /prefetch:8
                                                                                                                                                                7⤵
                                                                                                                                                                  PID:6768
                                                                                                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8324,i,11176934975733515258,14192707053461705865,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709084701265639 --mojo-platform-channel-handle=10048 /prefetch:8
                                                                                                                                                                  7⤵
                                                                                                                                                                    PID:3988
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11204,i,10062063262830748746,400776337785697390,524288 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709085638307488 --mojo-platform-channel-handle=10060 /prefetch:8
                                                                                                                                                                    7⤵
                                                                                                                                                                    • Enumerates system info in registry
                                                                                                                                                                    PID:4128
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --metrics-shmem-handle=11016,i,15112363864537824482,9440975734370476123,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709086575349337 --mojo-platform-channel-handle=10064 /prefetch:1
                                                                                                                                                                    7⤵
                                                                                                                                                                    • Checks computer location settings
                                                                                                                                                                    • Enumerates system info in registry
                                                                                                                                                                    PID:7852
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --metrics-shmem-handle=9924,i,14616755962967510665,14297629507606885859,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709087512391186 --mojo-platform-channel-handle=9976 /prefetch:1
                                                                                                                                                                    7⤵
                                                                                                                                                                    • Checks computer location settings
                                                                                                                                                                    PID:4792
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --metrics-shmem-handle=1816,i,8037449376892161994,7532317027898780716,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709088449433035 --mojo-platform-channel-handle=11156 /prefetch:2
                                                                                                                                                                    7⤵
                                                                                                                                                                    • Checks computer location settings
                                                                                                                                                                    • Enumerates system info in registry
                                                                                                                                                                    PID:8744
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --metrics-shmem-handle=8360,i,831810528071013427,6430010389391716474,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709089386474884 --mojo-platform-channel-handle=8640 /prefetch:2
                                                                                                                                                                    7⤵
                                                                                                                                                                    • Checks computer location settings
                                                                                                                                                                    PID:7748
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:address-bar-intent=on --with-feature:address-bar-intent-competitors=on --with-feature:ai-tab-management=on --with-feature:ai-writing-mode-in-context-menu=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:continue-filter=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-competitors=on --with-feature:domain-suggestions-with-misspells=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=on --with-feature:proxy-switcher-ui-default-visible=on --with-feature:realtime-impressions-reporting=on --with-feature:run-at-startup-default=off --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --metrics-shmem-handle=7228,i,13052502433247568968,2081743479913663592,2097152 --field-trial-handle=1956,i,6202162679596679147,272824836597300416,262144 --enable-features=CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,PermissionElement,PlatformSoftwareH264EncoderInGpu --disable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,14006022879680560340,939648338541101603,4 --trace-process-track-uuid=3190709090323516733 --mojo-platform-channel-handle=7488 /prefetch:2
                                                                                                                                                                    7⤵
                                                                                                                                                                    • Checks computer location settings
                                                                                                                                                                    PID:5208
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --version
                                                                                                                                                                    7⤵
                                                                                                                                                                      PID:5272
                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe
                                                                                                                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffb93346230,0x7ffb93346240,0x7ffb93346250
                                                                                                                                                                        8⤵
                                                                                                                                                                          PID:796
                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                                                                                                                                                                  4⤵
                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                  PID:5696
                                                                                                                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe
                                                                                                                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe" --version
                                                                                                                                                                  4⤵
                                                                                                                                                                  • Executes dropped EXE
                                                                                                                                                                  • Loads dropped DLL
                                                                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                                                                  PID:1120
                                                                                                                                                                  • C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe
                                                                                                                                                                    "C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7e4040,0x7e404c,0x7e4058
                                                                                                                                                                    5⤵
                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                    • Loads dropped DLL
                                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                                    PID:4268
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=8160,i,6082320575468017509,10631267595260637197,2097152 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=8188 /prefetch:1
                                                                                                                                                              2⤵
                                                                                                                                                                PID:4540
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8308,i,17781685661460798599,17825813604537997959,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=8324 /prefetch:8
                                                                                                                                                                2⤵
                                                                                                                                                                  PID:5528
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7664,i,12198193553090442758,2311163262065555821,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=6960 /prefetch:8
                                                                                                                                                                  2⤵
                                                                                                                                                                    PID:6492
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8380,i,14649144837761847730,5263703687460989856,524288 --field-trial-handle=1804,i,8945896665274925488,12541858006579079778,262144 --variations-seed-version --mojo-platform-channel-handle=8376 /prefetch:8
                                                                                                                                                                    2⤵
                                                                                                                                                                      PID:4868
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                                    1⤵
                                                                                                                                                                      PID:4200
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                                                                                      1⤵
                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                      • Loads dropped DLL
                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                      • Enumerates system info in registry
                                                                                                                                                                      PID:4748
                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                                                        2⤵
                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                                        PID:4392
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe
                                                                                                                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f6250
                                                                                                                                                                          3⤵
                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                          PID:3100
                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                                                        2⤵
                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                                        PID:1476
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe
                                                                                                                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f6250
                                                                                                                                                                          3⤵
                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                          PID:1580
                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                                                                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x26c,0x270,0x274,0x248,0x278,0x66c830,0x66c83c,0x66c848
                                                                                                                                                                        2⤵
                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                        • Loads dropped DLL
                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                        PID:3644
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                                                          3⤵
                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                                          PID:3384
                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe
                                                                                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f6250
                                                                                                                                                                            4⤵
                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                            PID:4104
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                                                          3⤵
                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                                          PID:5688
                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe
                                                                                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f6250
                                                                                                                                                                            4⤵
                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                            PID:5812
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                                                                                                                          3⤵
                                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                                          PID:5132
                                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe
                                                                                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f6250
                                                                                                                                                                            4⤵
                                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                                            PID:5344
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                      1⤵
                                                                                                                                                                      • Executes dropped EXE
                                                                                                                                                                      • Enumerates system info in registry
                                                                                                                                                                      PID:6620
                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe
                                                                                                                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\130.0.5847.41\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x250,0x254,0x258,0x24c,0x25c,0x7ffb838f6230,0x7ffb838f6240,0x7ffb838f6250
                                                                                                                                                                        2⤵
                                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                                        PID:7076
                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                                                                                                                      1⤵
                                                                                                                                                                      • Enumerates system info in registry
                                                                                                                                                                      PID:8532
                                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x210,0x254,0x27c,0x258,0x280,0x7ff7a483c738,0x7ff7a483c744,0x7ff7a483c750
                                                                                                                                                                        2⤵
                                                                                                                                                                          PID:8488
                                                                                                                                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                                                                                                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                                                                                                                                          2⤵
                                                                                                                                                                            PID:8328
                                                                                                                                                                        • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                                                                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                                                                          1⤵
                                                                                                                                                                            PID:7504

                                                                                                                                                                          Network

                                                                                                                                                                                MITRE ATT&CK Enterprise v16

                                                                                                                                                                                Replay Monitor

                                                                                                                                                                                Loading Replay Monitor...

                                                                                                                                                                                Downloads

                                                                                                                                                                                LICENSE

                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1028344355\LICENSE
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1028344355\manifest.json
                                                                                                                                                                                • Size 79B
                                                                                                                                                                                • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1034149101\manifest.json
                                                                                                                                                                                • Size 160B
                                                                                                                                                                                • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1118220164\manifest.json
                                                                                                                                                                                • Size 135B
                                                                                                                                                                                • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1177259670\manifest.json
                                                                                                                                                                                • Size 177B
                                                                                                                                                                                • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_1629810452\manifest.json
                                                                                                                                                                                • Size 135B
                                                                                                                                                                                • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_2030394542\manifest.json
                                                                                                                                                                                • Size 85B
                                                                                                                                                                                • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_221222058\manifest.json
                                                                                                                                                                                • Size 160B
                                                                                                                                                                                • SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3796_958165396\manifest.json
                                                                                                                                                                                • Size 43B
                                                                                                                                                                                • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1178722893\manifest.json
                                                                                                                                                                                • Size 202B
                                                                                                                                                                                • SHA256 8bd59f33a6e286c7e7352dfaebc9b03cea4e0e959a8ebb2f04b69bd92e107dc1
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1190879734\manifest.json
                                                                                                                                                                                • Size 95B
                                                                                                                                                                                • SHA256 8a13c7bcea9f8d54590aba3d202a653118f823c12a057ce01671581a1a10701e
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                hyph-as.hyb

                                                                                                                                                                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-as.hyb
                                                                                                                                                                                • Size 703B
                                                                                                                                                                                • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                hyph-hi.hyb

                                                                                                                                                                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-hi.hyb
                                                                                                                                                                                • Size 687B
                                                                                                                                                                                • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                hyph-nb.hyb

                                                                                                                                                                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\hyph-nb.hyb
                                                                                                                                                                                • Size 141KB
                                                                                                                                                                                • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1223628923\manifest.json
                                                                                                                                                                                • Size 82B
                                                                                                                                                                                • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1302446758\manifest.json
                                                                                                                                                                                • Size 145B
                                                                                                                                                                                • SHA256 6cce5ad8d496bc5179fa84af8afc568eeba980d8a75058c6380b64fb42298c28
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_133343683\manifest.json
                                                                                                                                                                                • Size 72B
                                                                                                                                                                                • SHA256 8541ddcefc17c421e19c9768a70c4772315795eac3268fd8820b0fb4f409720a
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_1511361357\manifest.json
                                                                                                                                                                                • Size 73B
                                                                                                                                                                                • SHA256 93cfceb4d7da2118c113d3c3ca3b37d2ddaf8bcf1eb64b65a0f8ac1dc8620880
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_421117455\manifest.json
                                                                                                                                                                                • Size 1001B
                                                                                                                                                                                • SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping6368_486575617\manifest.json
                                                                                                                                                                                • Size 94B
                                                                                                                                                                                • SHA256 95a2b0748baee70740ff2d5da78f98b5a29950562f989591f0b0b5bf13354b85
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                blocklist

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                                                                • Size 105KB
                                                                                                                                                                                • SHA256 bf6c7c1e310b8b7658a6486f9e0ec1988af55c64b0088c5e106c251843317694
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                protocols.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                settings.dat

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                • Size 280B
                                                                                                                                                                                • SHA256 d084fddc35d62ab10457432373865714cd0577ad9bebe9188135998b9f802bd3
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                settings.dat

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                • Size 280B
                                                                                                                                                                                • SHA256 6b65e3f6d57bee85b90392c47f2236ea7ffcfe9cba07ca29930764c7dacc0ea2
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                settings.dat

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                                                • Size 280B
                                                                                                                                                                                • SHA256 ecc103220659b15b56c51e9002281cb930975deca8db44af194bf80a64b234af
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                LOG.old

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                                                • Size 331B
                                                                                                                                                                                • SHA256 c4b8e8e0b1b8ba0ce3ed54957497a194e9604dcfe42bd9159b774ac683c4d868
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                f_0000ce

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
                                                                                                                                                                                • Size 34KB
                                                                                                                                                                                • SHA256 d27f23c77e9f765ff3b019a8016c04dd8ff4cb4fd2592776283adbe2c3a7f806
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_0000cf

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cf
                                                                                                                                                                                • Size 99KB
                                                                                                                                                                                • SHA256 281b893e75496de203b9a1950afc4e961317df2028829adcfe570716b3f2fc26
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_0000d0

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
                                                                                                                                                                                • Size 67KB
                                                                                                                                                                                • SHA256 dbcc398cedeb91d25b5d2ac13748929578cc464e0d7cadd8907a4b32f26f2100
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_0000d1

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d1
                                                                                                                                                                                • Size 403KB
                                                                                                                                                                                • SHA256 4d6e0f5c9257f00e0ce603952459de1a9f87d4537ee4c1160fd9e54359b1ebe3
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                • SHA256 d0c2833e03078b790502559c175061d4d39b07d4ccfd61f16d80ac4b4675bc30
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                • SHA256 6ec1689c9b6ad1ea67f30dab4eccf065237f75144c524bb5d534dc53beb65b1d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 d88964e3710061bdd3026d90604ee3bc69472aab6139b895b099a065682c701f
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                the-real-index~RFe58948a.TMP

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58948a.TMP
                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                • SHA256 9da46ab9ef603d9266ed510e992421084d544730bd1e8225e118bb6669e16a37
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
                                                                                                                                                                                • Size 96B
                                                                                                                                                                                • SHA256 469cfad8b42bb2dc15214c31ec8e0bffadd5ca3711863db991231d950a22b38b
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
                                                                                                                                                                                • Size 144B
                                                                                                                                                                                • SHA256 9f4158a42ca6e7ad49cafe5b8b16a6472e02e8aabd29a792e86345e7b26474cb
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                SiteList-Enterprise.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                                                • Size 2B
                                                                                                                                                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                Edge Profile.ico

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                                                • Size 70KB
                                                                                                                                                                                • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                HubApps

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                                                                                                • Size 106KB
                                                                                                                                                                                • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                • SHA256 58210e2b8c89381d8b6e04590444b0140e2dd246b78bd99a0f8cc14837190c57
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 de4322570575280a2d83d54071dfac3983619922e713a96cd011ca64873b7ca9
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                • Size 111B
                                                                                                                                                                                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                • SHA256 123f5adda02b64355eb3457183f544b356c4ade37b6f4c6750b8be160fbe36d7
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                • SHA256 06c97bf2e3d1c5e0abf11736b5c60097dc823f074346eccd0256989b2effa437
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                SCT Auditing Pending Reports

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                                                • Size 2B
                                                                                                                                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 4789d64ce28f225a8478ddfcc5fcc5ac6838ab9e4c1e9608b9955bcc262855a2
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                • SHA256 5ad6e94951a264aa8c17b02f600e3df01189d859a5ddb6f1fa8e98da0f5faa12
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 40748d7d1aa5a3db2b03d55a89fa7b1f909bbfea92b725704e3f7cfa9d3bffe4
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 46fce5ff19d3a2bb432746b423c1c3fb0992144c919917b1a2b510e1cf38d238
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Secure Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                                                • Size 35KB
                                                                                                                                                                                • SHA256 c2898240df850a790aaf43f89c0fb9c23d34a50ada0f90249f61a379ce7b7634
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\32bd6690-22d7-4d50-901d-6f07e47d7f4c\index-dir\the-real-index
                                                                                                                                                                                • Size 72B
                                                                                                                                                                                • SHA256 cfcd90318c2583fddc2344ff0177c155672e66e6a4a22a707f7a506c00547bbc
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\32bd6690-22d7-4d50-901d-6f07e47d7f4c\index-dir\the-real-index
                                                                                                                                                                                • Size 72B
                                                                                                                                                                                • SHA256 e6ceccd3ecfeab345b8bc4622f4171f23e6353bd2c04be8f0d8925150a892adf
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a8685028-8a71-4316-b2b9-e9c8eb46c656\index-dir\the-real-index
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 928ebb3f67a67b15e0785f6db330e924bd2d835e5c0f18b2835b98787c078e1d
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a8685028-8a71-4316-b2b9-e9c8eb46c656\index-dir\the-real-index
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 8bf9ac13a3d1ee7015fbe482042111002b6c4d9902a40e64a778983981f25705
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index~RFe5b72ac.TMP

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a8685028-8a71-4316-b2b9-e9c8eb46c656\index-dir\the-real-index~RFe5b72ac.TMP
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 ebb60435da40083f76159af74bfa7927045dc027fb502d30bb1cdff5cff1ad82
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                index.txt

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                                                • Size 371B
                                                                                                                                                                                • SHA256 d5cd1cc1c6cad6abc1ab11ef8474cc2da4f37786b49b92378fa230dd0ff4f6e9
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\6ede284f-1785-4bb5-886d-41f8e6909676\index-dir\the-real-index
                                                                                                                                                                                • Size 72B
                                                                                                                                                                                • SHA256 53ccf94a18a357a3b4784482c44f6478f2398b8210c360d280f9b4345c8aeb4b
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index~RFe5adb0f.TMP

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\6ede284f-1785-4bb5-886d-41f8e6909676\index-dir\the-real-index~RFe5adb0f.TMP
                                                                                                                                                                                • Size 48B
                                                                                                                                                                                • SHA256 ec59500155cc06add3c2982465c50d24df40fa79f49da5cbb717c529d97705ed
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\c56d3546-11fd-4d20-adae-ad6ec5628b5d\index-dir\the-real-index
                                                                                                                                                                                • Size 72B
                                                                                                                                                                                • SHA256 462adad1493a70bc5f376e08f2b9e8ebd61540bd18847e7d28a37a2411cd1008
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index~RFe5b0675.TMP

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\c56d3546-11fd-4d20-adae-ad6ec5628b5d\index-dir\the-real-index~RFe5b0675.TMP
                                                                                                                                                                                • Size 48B
                                                                                                                                                                                • SHA256 6773cd7aa63cad1a44250b7d1997bd786e484cf9b5fc28e141cff934b9b71876
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                index.txt

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                                                                                                                                • Size 229B
                                                                                                                                                                                • SHA256 c2536d9df9ab75a4ac16a5ef22f9846afbe2f5c51cdf3941a52b1e7f1ee90b5b
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                index.txt

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                                                                                                                                • Size 233B
                                                                                                                                                                                • SHA256 20cb175ef963898d35834b2c23737b4997e02f3c1cd97ea2bc0bc7a0647e28bb
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                index.txt

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                                                                                                                                • Size 226B
                                                                                                                                                                                • SHA256 ff66773aae0037617d202113fbf06ab0d8c0eacc2efe387b5adb38c68dfac5b7
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                index.txt~RFe582650.TMP

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe582650.TMP
                                                                                                                                                                                • Size 138B
                                                                                                                                                                                • SHA256 0399b015bf87fd6cbbe25fb2e8ccad04b3ec6bf93840087c746528438a9de54b
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                • Size 72B
                                                                                                                                                                                • SHA256 94f86ff1794ad6fdde8ab2f118c532ee2d212a250849fb2fa7c57547c7d2c327
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index~RFe5bc938.TMP

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5bc938.TMP
                                                                                                                                                                                • Size 48B
                                                                                                                                                                                • SHA256 2c53374671d7945552c53f7e7d731611db0d02a8a506164b0d9e02e205114c0a
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                sync_diagnostic.log

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                • SHA256 f98e29d1cb805c78dea5feba368da5f48773ba6ca44d8f7f224890d4222c76fa
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                CURRENT

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
                                                                                                                                                                                • Size 16B
                                                                                                                                                                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                MANIFEST-000001

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                                                                                                                                                                • Size 41B
                                                                                                                                                                                • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                OperationConfig

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                OperationConfig~RFe590853.TMP

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe590853.TMP
                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                office_endpoints_list.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                • SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                Local State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                • Size 29KB
                                                                                                                                                                                • SHA256 72255cac37cc70be4065e105e134013cb56569a3126e50dae44ae307f7c2ea2b
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Local State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                • SHA256 d2a5a685d1f649adbfd1d46cadc39d697bca8ba3c5c31a7867efd61b60f785cb
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Local State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 480ebbd7245f1d13c3fbb451f66f5bf5e4a13a10b5011bd35f5654dd000a4f2d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Local State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 1e336fdadd7222beb6cdded7628271420a0ad4617fb23689b429eea6098cc890
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Local State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                • Size 29KB
                                                                                                                                                                                • SHA256 c37247ef8f11a03d72371d1206db8bf72c78a777b91a16a74f0813ae3e85cd58
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Local State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                • Size 37KB
                                                                                                                                                                                • SHA256 04def8264b7af15239eba0791223a343d4e3fea94bed1c546df1a593ca9d0cab
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Local State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                • SHA256 3b16ea3209cfb4d640e6ef6e1fa54df891b77d25c74c0c925a4d8c795cf044c0
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Local State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                • SHA256 4fe20ee3ee6b8146c1df7f562b863ec4e579167477e5fc99b866bcce7a251947
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                • Size 392B
                                                                                                                                                                                • SHA256 0dbb10c2730723d7d345263c5deb035494ebc60fad1c7fd4973b1db530aba2ca
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                RevisitationBloomfilter

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                                                • Size 392B
                                                                                                                                                                                • SHA256 51a6e81f7bae95fe44bf2885e39819b714758d3938fa24fd0213a6059ac86677
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                RevisitationBloomfilter~RFe5ac499.TMP

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5ac499.TMP
                                                                                                                                                                                • Size 392B
                                                                                                                                                                                • SHA256 5441604661b3fbbb0901ace13713371d073193e7c701a186ba91827852aaf240
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                keys.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                nav_config.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                metadata.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                • Size 372B
                                                                                                                                                                                • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                metadata.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                • Size 252B
                                                                                                                                                                                • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                metadata.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                • Size 492B
                                                                                                                                                                                • SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                metadata.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                • Size 612B
                                                                                                                                                                                • SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                metadata.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                • Size 852B
                                                                                                                                                                                • SHA256 453a08edb83095062ff59beb4f28403a177007ecdc5b93c88074cf8ae24c9b39
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                metadata.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                • Size 132B
                                                                                                                                                                                • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                metadata.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                                                • Size 732B
                                                                                                                                                                                • SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                metadata.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                                                                                                                                • Size 13B
                                                                                                                                                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 281941612aa73f0216a1b83fb51b3edf3a364594a592089474cc36ce74722653
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                f_000001

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000001
                                                                                                                                                                                • Size 25KB
                                                                                                                                                                                • SHA256 a1ff7b3cf1549f9152aee9bf7d475ec69f4a5d844c4054fa53a68102c758100f
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000002

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000002
                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                • SHA256 8073ff708bc0b02ec62325fcc119b7cc6ee9df9a47627167da0d48128781891c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000004

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000004
                                                                                                                                                                                • Size 53KB
                                                                                                                                                                                • SHA256 7debc0074010a8f50ab72a7744a7ffc863ac5d1b88516ee607e26c458355d395
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000005

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000005
                                                                                                                                                                                • Size 23KB
                                                                                                                                                                                • SHA256 02afb78e6f2c4ff814c067003c9257dec267f75c36a2270a44d26f2d3e30faa2
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000006

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000006
                                                                                                                                                                                • Size 37KB
                                                                                                                                                                                • SHA256 8db5e427387b47b66202152a4d011dc43ef2b3391935d4aa09596470a2782520
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000007

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000007
                                                                                                                                                                                • Size 186KB
                                                                                                                                                                                • SHA256 4eb93a1109e9c0ad1d12d0ca06df0d004fac692f68515fc914932a642410fc91
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000008

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000008
                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                • SHA256 71bb0d19ad3f11bb93779b9a23791a9020c9fc39c04c5bd03ef53d8daae50277
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000009

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000009
                                                                                                                                                                                • Size 23KB
                                                                                                                                                                                • SHA256 e50bbfa9012881b4393ab4989a200e78647ee3ae3c0d1ff4bb0f80e6b4bb7bd0
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_00000b

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00000b
                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                • SHA256 96da563de9ce60c319e00e4c43d550d88aeabf3229a2893ab864031796d3332e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_00000c

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00000c
                                                                                                                                                                                • Size 24KB
                                                                                                                                                                                • SHA256 91abcf3059785a3f1fc8190c0b2be76c329ac38f6fbb9010808710537b192359
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_00000e

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00000e
                                                                                                                                                                                • Size 145KB
                                                                                                                                                                                • SHA256 b8ca3af059f07c43873cf9ab56e5aef36ced193b0b91cb53465470e88d0d3497
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000017

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000017
                                                                                                                                                                                • Size 401KB
                                                                                                                                                                                • SHA256 cfc84a8768dd9b8e28be12f55f2d4cd788b3b6a9741deae4464f9f2ebd55ef8c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000018

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000018
                                                                                                                                                                                • Size 150KB
                                                                                                                                                                                • SHA256 20f1cb5bb25202091bd2a4a3f0d6ffad8f76d555c0b9b201d283e1b059871541
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000019

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000019
                                                                                                                                                                                • Size 36KB
                                                                                                                                                                                • SHA256 347ab2d9c4223765cea16c56044cd2328cb6d143e86fd78f7ec374a872c44221
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_00001a

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00001a
                                                                                                                                                                                • Size 64KB
                                                                                                                                                                                • SHA256 3f2a84f851b08814ab4cf17f40cef31addf233a2f7076f1eeaf036f78f48dbe4
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_00001b

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00001b
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 410bf477c3e5e468586a6140ddadfddc39d7f562a1644cfbfbeb75fd885588b8
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_00001e

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00001e
                                                                                                                                                                                • Size 49KB
                                                                                                                                                                                • SHA256 5f4ddc8dc9ed195b39b13b9d41de56f127e3bd38a81678d7c4a50e9878ca2c26
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000022

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000022
                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                • SHA256 2c97185fa36988505079fa0077351061cb7929b4a08e00989f223cfdb4c11375
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000023

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000023
                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                • SHA256 e9a34772079fec79b369e1fbaccbf35826e40f15d41c18e172a0f6da4ddf43fd
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000024

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000024
                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                • SHA256 1e4a380e5a36c139d26a41e6de3503e21f1acf4688d3af695bdaaea6f51d6839
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000025

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000025
                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                • SHA256 e988846d20362f1874850cb57d8eec4d3e73cf38ac45a4b273bc6bf879031bc5
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000026

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000026
                                                                                                                                                                                • Size 113KB
                                                                                                                                                                                • SHA256 d28d00cb5424bf2bd020ab4adcbe46799e02bdebb9f78932026ee8b3fe8ce291
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000027

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000027
                                                                                                                                                                                • Size 63KB
                                                                                                                                                                                • SHA256 756757b38c74731a48856df6c660768cf7df30044c215c52fd037f92c349c9ee
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000028

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000028
                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                • SHA256 5d1775a61122bfc8d35b103aa1ae409e10345011ba808e7166510e48bb18e5ed
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000029

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000029
                                                                                                                                                                                • Size 146KB
                                                                                                                                                                                • SHA256 88ba52c80d812adbe50f5d7fe0acddfcc8d92a6bb1d44d206968baa7926be1ae
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_00002a

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00002a
                                                                                                                                                                                • Size 41KB
                                                                                                                                                                                • SHA256 e5f8495919fa782c7fd03e4b456855b5fc588d6c4dece49d3c36c9644833f213
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_00002b

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00002b
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 81c941bc3ec99ae55dd58c0590c9a1100a926c98135021de68db523b7f5eed8c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_00002c

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00002c
                                                                                                                                                                                • Size 74KB
                                                                                                                                                                                • SHA256 4171cb53934891bf3cce15f70e70665a93c16f64a681e8fed2bc817893943a58
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_00002e

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00002e
                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                • SHA256 84e4d1bb0e67068f047e94d84e96116889017c2748b70449b2a44b916e9a3f72
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_00002f

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00002f
                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                • SHA256 bc70d1eb3a110360ba7e097121323431d8f4042a7ad72c8d82077c59f152b8e8
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000030

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000030
                                                                                                                                                                                • Size 45KB
                                                                                                                                                                                • SHA256 fbc770cadf0dd2a4f7837314f5ef409c184245da5c543fbe00cacaeb738f7ec4
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000031

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000031
                                                                                                                                                                                • Size 246KB
                                                                                                                                                                                • SHA256 d62354dea57103fa9d3fbcbfa7d34a4effe9ece023dd0540716b6da710957c12
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000032

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000032
                                                                                                                                                                                • Size 34KB
                                                                                                                                                                                • SHA256 c4a0bdc95ddc9356b6b59a1063494e3f502c1e7d0301324d4c5db3248b568809
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000033

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000033
                                                                                                                                                                                • Size 48KB
                                                                                                                                                                                • SHA256 196122da8fe6c3597023a0aa407c33ff4eb2af1f204a3c93ec0730f1b503d99e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000034
                                                                                                                                                                                • Size 297KB
                                                                                                                                                                                • SHA256 8b7a79c105853dc14ce31d56fabecedb8c19c75f8e66bc078a2bb2431111e077
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000035

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000035
                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                • SHA256 0aaff4f0b7e0d66401c38bff48bd1d6ebafe9dd4f4691e50c60e2ba28e17ce4d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000036

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000036
                                                                                                                                                                                • Size 147KB
                                                                                                                                                                                • SHA256 67893bff878c30fabc6c6544d2d426227db57a4eb70e911027248bc67d5f7f95
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000037

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000037
                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                • SHA256 18cc5812756761f3b510afa464c13f9a9f3eced11fba98561623607cfd565a45
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000038

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000038
                                                                                                                                                                                • Size 30KB
                                                                                                                                                                                • SHA256 dd9e8c900fba8390cc6e46cd3c0bf90c6184f49a742900feb0da572ce8b37ac8
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000039

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000039
                                                                                                                                                                                • Size 251KB
                                                                                                                                                                                • SHA256 c3da177f3aec1d5753c6edb4b54db56ceb9a575b52642281a9d299004305cd05
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_00003d

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00003d
                                                                                                                                                                                • Size 171KB
                                                                                                                                                                                • SHA256 d982490741549218dda32038626a4ba754208659efc98b0c9ede16ff11b3cad2
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000051

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000051
                                                                                                                                                                                • Size 42KB
                                                                                                                                                                                • SHA256 b78fb569265b01789e7edd88cfe02ecb2c3fee5e1999678255f9b78a3b2cc4e8
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000052

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000052
                                                                                                                                                                                • Size 44KB
                                                                                                                                                                                • SHA256 5d225b25d66b30563a00f395476ed701130d3f749620a63531cea09fc537164e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000053

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000053
                                                                                                                                                                                • Size 38KB
                                                                                                                                                                                • SHA256 13da02ce62b1a388a7c8d6f3bd286fe774ee2b91ac63d281523e80b2a8a063bc
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000054

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000054
                                                                                                                                                                                • Size 136KB
                                                                                                                                                                                • SHA256 234feb9a8a2c759d00a4959506a3b9cb94c772186a2d117aed973347c7ef1891
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000055

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000055
                                                                                                                                                                                • Size 175KB
                                                                                                                                                                                • SHA256 a981989aee5d4479ffadf550d9ecff24a4ac829483e3e55c07da3491f84b12ba
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000056

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000056
                                                                                                                                                                                • Size 133KB
                                                                                                                                                                                • SHA256 426ae06cd942849ab48b84c287c760f3701b603ebcc5c9aaa4a89923ef5f058e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000063

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000063
                                                                                                                                                                                • Size 224KB
                                                                                                                                                                                • SHA256 7d44d0592754bd205a724cdadd7a5cbb067493d79d9149312a46b906abafe058
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000064

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000064
                                                                                                                                                                                • Size 28KB
                                                                                                                                                                                • SHA256 5f04f8784d86bacc47153ff77ec43774f1af412df18b7136062f384e4947b83b
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000065

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000065
                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                • SHA256 1e7f6ea1298758403297e8f9049b072db59dceb3518186164ffc16550c5c5ac3
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000066

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000066
                                                                                                                                                                                • Size 156KB
                                                                                                                                                                                • SHA256 313818d6b177a70fbe715a5142d6221ac1a1851eff5a9f6df505670ddcd73074
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000069

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000069
                                                                                                                                                                                • Size 284KB
                                                                                                                                                                                • SHA256 f6c1359b0aef2370f9762bdee12987c756db5e36456214d314470aac6e393ce4
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000070

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000070
                                                                                                                                                                                • Size 26KB
                                                                                                                                                                                • SHA256 c4b204f939b9d4be54404267319e23d7678b8e9ce4098a2e19787ba000436653
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000071

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000071
                                                                                                                                                                                • Size 46KB
                                                                                                                                                                                • SHA256 4fc919f2a3464ae1daec53e95b76c35ba16ecb52e1a513776a7385b180580224
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000072

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000072
                                                                                                                                                                                • Size 91KB
                                                                                                                                                                                • SHA256 c1ad8c54df1712059c85c57821c0a0d92efd3fbe1c4c3ab422414a1e84c2b4a9
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000073

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000073
                                                                                                                                                                                • Size 29KB
                                                                                                                                                                                • SHA256 2d4dbe33c521a3d97ebf280ff8ac72ee8841f38b11cfab239d3070da5e13f277
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000078

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000078
                                                                                                                                                                                • Size 206KB
                                                                                                                                                                                • SHA256 e50e2ac6bfee69102b4cb90a5bf1c78a7770d698e0247b6e6c00a404522f154d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000079

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_000079
                                                                                                                                                                                • Size 318KB
                                                                                                                                                                                • SHA256 290f2bef88a236080a96972ac0c88ff613699e0de15b1b29fa87d42325658b81
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_00007c

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\Cache\Cache_Data\f_00007c
                                                                                                                                                                                • Size 38KB
                                                                                                                                                                                • SHA256 09ad10f49154b5c68bae7d046fab75d22fc2f079434289b5212c6334b77db826
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                f_000001

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                                                                                                                                                                • Size 160KB
                                                                                                                                                                                • SHA256 636952b6d568980b6c7cb411ef5955e65f17654a2beb87074f2e6fcffa8e9049
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                installer_prefs.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 ef15ca68d2b82d1a5a3b5a1e1986cbedb30dbebd4e9a17c54bd887fd213d08a6
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                opera.exe

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                                                                                                                • Size 2.6MB
                                                                                                                                                                                • SHA256 fca38f7f0fd9bf7f02bbbfe0e416b37191c2cddf2eb1c6710bc5f57bb6eb2490
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Opera Browser.lnk

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\Opera Browser.lnk
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 0b8a2027f140b34d028d87d41d492d067dac3a9f7a2f1fd6491faf4c57b6d4b6
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                additional_file0.tmp

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\additional_file0.tmp
                                                                                                                                                                                • Size 2.8MB
                                                                                                                                                                                • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                assistant_installer.exe

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\assistant_installer.exe
                                                                                                                                                                                • Size 2.4MB
                                                                                                                                                                                • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                dbgcore.dll

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\dbgcore.dll
                                                                                                                                                                                • Size 222KB
                                                                                                                                                                                • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                dbghelp.dll

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\assistant\dbghelp.dll
                                                                                                                                                                                • Size 1.8MB
                                                                                                                                                                                • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                installer_prefs_include.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\installer_prefs_include.json
                                                                                                                                                                                • Size 417B
                                                                                                                                                                                • SHA256 2ffde029b3a7bbc03c7c7b37add781586fcd2eee2c9ab5e43db140d9bcddda9f
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                installer_prefs_include.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\installer_prefs_include.json
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 37b40e47e6306d79e9971da284a290dc37fa8ada75ea1458bec29f63a8aceba7
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                installer_prefs_include.json.backup

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\35dca1ca-023b-4e41-98e5-437cc94a8141 Opera Installer Temp\opera_package_202604172331061\installer_prefs_include.json.backup
                                                                                                                                                                                • Size 402B
                                                                                                                                                                                • SHA256 76d1695f0a3658e912658aeab61afe792c27e29ea9a66f67e61b53995e5d8d56
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                28ed0ba3-c83e-4888-9992-61b6907a04c8.tmp

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\28ed0ba3-c83e-4888-9992-61b6907a04c8.tmp
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                4f052a70-1dbb-4297-a9f4-50cf9aa5199b.tmp

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\4f052a70-1dbb-4297-a9f4-50cf9aa5199b.tmp
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 d6a7b4d351a6a936a754f7468b3d2ec511690c58e971f4c88b9550eb91acb3df
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                installer.exe

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\7zS0F4D98DB\installer.exe
                                                                                                                                                                                • Size 8.2MB
                                                                                                                                                                                • SHA256 9993e30ca2d3a42c5959bca3b8fbad99f28e6a87dc186841e2f03ebf6acd471d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                96e316d4-7489-466d-a98b-68fadbf38e0c.tmp

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\96e316d4-7489-466d-a98b-68fadbf38e0c.tmp
                                                                                                                                                                                • Size 2.6MB
                                                                                                                                                                                • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                c12c36a4-e753-455e-be4d-d64c99f7e174.tmp

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\c12c36a4-e753-455e-be4d-d64c99f7e174.tmp
                                                                                                                                                                                • Size 4.5MB
                                                                                                                                                                                • SHA256 8edd61cc40f2d679766da78c61593ee986ffc9aa77455d947e9dcd928410f4bf
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                d0261476-fe01-4308-9815-edecb89de608.tmp

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\d0261476-fe01-4308-9815-edecb89de608.tmp
                                                                                                                                                                                • Size 1B
                                                                                                                                                                                • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                content_new.js

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3796_1904957397\CRX_INSTALL\content_new.js
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                90d6402e-2d89-4a6a-9002-e68efacbe7ff.tmp

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3796_2110643175\90d6402e-2d89-4a6a-9002-e68efacbe7ff.tmp
                                                                                                                                                                                • Size 147KB
                                                                                                                                                                                • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                favicon_opera_one.png

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6000_2060609036\CRX_INSTALL\favicon_opera_one.png
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                service_worker.js

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6000_2060609036\CRX_INSTALL\service_worker.js
                                                                                                                                                                                • Size 55KB
                                                                                                                                                                                • SHA256 33b0859347e02c9142fd7823b297714b88e474c8278f4778efdfb01f1e6b8034
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                de932af914ba00303d4a2778a383ac9c831101e2.crx

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6000_2060609036\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                                                                                                                                • Size 5.5MB
                                                                                                                                                                                • SHA256 6a6d3e9600898b2b4ec003c5cdeecea3a3e45cf49e080baac63520530e9b1a24
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Icon_Light_Neutral.png

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6368_595939707\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                messages.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6368_750810032\CRX_INSTALL\_locales\en_AU\messages.json
                                                                                                                                                                                • Size 194B
                                                                                                                                                                                • SHA256 7751b796c508c30db59a33479e99582bf16ed3b8975e90d1f8e678803aedf704
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                heuristic_regexes.binarypb

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\AmountExtractionHeuristicRegexes\4\heuristic_regexes.binarypb
                                                                                                                                                                                • Size 633B
                                                                                                                                                                                • SHA256 a10f65d7e0d56702d6f08850c8bee9bd51af17f4be051900ff2b88c9217e425f
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                crl-set

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\CertificateRevocation\10470\crl-set
                                                                                                                                                                                • Size 1.0MB
                                                                                                                                                                                • SHA256 627981aae32aa4fca0851b07ae3a91a551a2ee8085c21fb25e10bd9563cc351b
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                settings.dat

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                                                                                                                • Size 40B
                                                                                                                                                                                • SHA256 6007b1bea8b98210452fb8e08ccc4ea883b1cccb1e52a7b6f93b8f86f1c9fc70
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                45cb7a91-f2a2-41cf-bd62-dc47d9fd47c9.tmp

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\45cb7a91-f2a2-41cf-bd62-dc47d9fd47c9.tmp
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 5bbe0a8a535059ddbf84e2d71feba16a1ee135bd216e08a54b0d8859e2865249
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                8539d610-d62c-4823-9c78-e00738b6d191.tmp

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\8539d610-d62c-4823-9c78-e00738b6d191.tmp
                                                                                                                                                                                • Size 6B
                                                                                                                                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                8d4ceb3b-aa5a-4c46-ba61-53251caa016f.tmp

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\8d4ceb3b-aa5a-4c46-ba61-53251caa016f.tmp
                                                                                                                                                                                • Size 601KB
                                                                                                                                                                                • SHA256 4357e7252eb7a2984f987284f942b7b63e54318dc18d2391687c42ffb4d898fc
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Bookmarks

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                                                                                                                                • Size 30KB
                                                                                                                                                                                • SHA256 2ced988c5a6154d120589abf5d21906209b081114607709f8ccd854bdeac5810
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                BookmarksExtras

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                                                                                                                                • Size 245KB
                                                                                                                                                                                • SHA256 443aa01299570311e06c5b11797eefd9c24634bd6eba7514b8150f2e28bff82a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                • SHA256 9c102bc0b38c25bac5d5f4140fd939c331b64905b17d20872c1ecd0fffecaee4
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                • Size 48B
                                                                                                                                                                                • SHA256 aa354e9199532c1c54730003700cd3bec15ba6519c0dd5b545e5c72423cdb66c
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                • Size 264B
                                                                                                                                                                                • SHA256 c7ba452b990331068d234200fd4284326f9d415bc13914ebcb50fe3bc33032e8
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                • SHA256 1b0755a60fa189d8669f0534418714ebd4ea3aacfe62f9cdf9e64772f7e8cc21
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                • Size 768B
                                                                                                                                                                                • SHA256 f99ce71a9ad6614bd1f1166150f3f362a80893cc8673ea68b9e8edc0bff6e8af
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                • SHA256 f3c0c6748af97acf16b8bfdcb997af403a3ed3775e84aa697950743b8b12a68d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                • SHA256 3f0b1dbaa32786b39a62100912896d124f394daefa88f4f2440c9e0634572f44
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                • SHA256 d61de3006417e078dbbc08e8995e02db86aa2938a4cb57979e2fe23005f122ce
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\wasm\index-dir\the-real-index
                                                                                                                                                                                • Size 96B
                                                                                                                                                                                • SHA256 9f5928d4a6a4d6aca6e19d38094f4f178a34bdef490402c71af92a7b46fe3c43
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                data_0

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_0
                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                data_1

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_1
                                                                                                                                                                                • Size 264KB
                                                                                                                                                                                • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                data_2

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_2
                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                data_3

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_3
                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                                webpage_content_reporter.js

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir6000_1295522476\CRX_INSTALL\webpage_content_reporter.js
                                                                                                                                                                                • Size 113KB
                                                                                                                                                                                • SHA256 2f60af001760683ef280d0e8fe5cb7d91317a3c2751de436b7547c9798f6ccfc
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                5f2d12d49f175c263326.woff2

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\akcocjjpkmlniicdeemdceeajlmoabhg\4.1.0_0\5f2d12d49f175c263326.woff2
                                                                                                                                                                                • Size 127KB
                                                                                                                                                                                • SHA256 01a3054a93060a53b95ca456ad1d1a8e8b50e5bbf97d0fb53c4b54c76352a2fe
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                messages.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\akcocjjpkmlniicdeemdceeajlmoabhg\4.1.0_0\_locales\en\messages.json
                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                • SHA256 ef92dac172ecf2a99d6cb8fe37ac749db57a665d751957ed3fa951e260059d99
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                messages.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\akcocjjpkmlniicdeemdceeajlmoabhg\4.1.0_0\_locales\en_AU\messages.json
                                                                                                                                                                                • Size 210B
                                                                                                                                                                                • SHA256 6323d8f9a349f093f742e8b4df973a1de0a4ece965a6be043d41e23a11b54b66
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                background.bundle.js

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\akcocjjpkmlniicdeemdceeajlmoabhg\4.1.0_0\background.bundle.js
                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                • SHA256 70ce09a76aebfb28fe5815e684fd6e608919d0291e39006250cc3677afaf0edd
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                d64c39378d51a2e7a352.woff2

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\akcocjjpkmlniicdeemdceeajlmoabhg\4.1.0_0\d64c39378d51a2e7a352.woff2
                                                                                                                                                                                • Size 112KB
                                                                                                                                                                                • SHA256 4637351453a2b3587df38afb90f566ec7233a27afbb395bfbd1f0c0fd7744eda
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                icon128.png

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\akcocjjpkmlniicdeemdceeajlmoabhg\4.1.0_0\icon128.png
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 db3c660133b6d5c2e93f2f6862c32926fabdcaad11898577e1d51c19f9003631
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                popup.bundle.js

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\akcocjjpkmlniicdeemdceeajlmoabhg\4.1.0_0\popup.bundle.js
                                                                                                                                                                                • Size 282KB
                                                                                                                                                                                • SHA256 9ce33bdeef7849916daa5d294519fa313f31612416fff83ae00c5c8ed70ad892
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                popup.html

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\akcocjjpkmlniicdeemdceeajlmoabhg\4.1.0_0\popup.html
                                                                                                                                                                                • Size 259B
                                                                                                                                                                                • SHA256 863258d0413f0f1171cc506bdd28d0928cc9c1394e057046fa9fedf8ca0e01b0
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                background.js

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\blhcicojjhpbkbjkcfmbpjjjndljmfon\0.1.70_0\background.js
                                                                                                                                                                                • Size 129B
                                                                                                                                                                                • SHA256 60aea522f14510f7eb2f882fef11d9f13f01717df67ef4b85abd598b94c43f64
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                index.js

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\blhcicojjhpbkbjkcfmbpjjjndljmfon\0.1.70_0\index.js
                                                                                                                                                                                • Size 328KB
                                                                                                                                                                                • SHA256 66d59d2f42a94a56770521a499a544fcab1bb7a92a884961f85bf056c9c6b5fc
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                cos-bridge.js

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.1.2_0\cos-bridge.js
                                                                                                                                                                                • Size 173B
                                                                                                                                                                                • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                cos-content.js

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.1.2_0\cos-content.js
                                                                                                                                                                                • Size 502B
                                                                                                                                                                                • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                main.js

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.1.2_0\main.js
                                                                                                                                                                                • Size 46KB
                                                                                                                                                                                • SHA256 251d7ccab9ed6ea88bf36dff429cb6e1ce196465451fa877c63b97712cb20aca
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                favicon_opera_one.png

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.28.0.3_0\favicon_opera_one.png
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                manifest.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.28.0.3_0\manifest.json
                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                • SHA256 5525ca28f0d8c0920fd72135b6f83a14a095f163e472b6ff0693fa027de67181
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                background.js

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                                                                                                                                • Size 86KB
                                                                                                                                                                                • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Icon_Light_Neutral.png

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 2ab8cc6f56fb252cebe597a68724d4a60e604f87014a71f27afa865fab6309de
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                popup.js.LICENSE.txt

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                rules.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                                                                                                                                                                • Size 839B
                                                                                                                                                                                • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                2d17660b-717a-4ac1-bda5-701be4afa535.tmp

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\2d17660b-717a-4ac1-bda5-701be4afa535.tmp
                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                382d3803-c75e-4c2c-881c-823616838630.tmp

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\382d3803-c75e-4c2c-881c-823616838630.tmp
                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                • SHA256 39bd99139f46534251ca30ee1eafe846edde8f96356642e04b68a9f2af9799b7
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                473517a7-9135-4eb5-9750-0a7fa3c26337.tmp

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\473517a7-9135-4eb5-9750-0a7fa3c26337.tmp
                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                612dc786-abaf-406c-b4bd-001d6283c566.tmp

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\612dc786-abaf-406c-b4bd-001d6283c566.tmp
                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                8b0b1a46-a890-4937-a56f-5b7a1ac4e6a4.tmp

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\8b0b1a46-a890-4937-a56f-5b7a1ac4e6a4.tmp
                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                • SHA256 750f88c1d2cbead44ca4a3e2d52dfbed8a5dbe149eddfb63e71fa4c6380efa93
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                9f07d47e-0fc3-403c-8651-a8c77c2eebb9.tmp

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\9f07d47e-0fc3-403c-8651-a8c77c2eebb9.tmp
                                                                                                                                                                                • Size 27KB
                                                                                                                                                                                • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 3e7765a6580d0f6b60662e6d60ba8de12f9934b78a76cbf0537a7bd3bf845251
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                                                                                                                • Size 7KB
                                                                                                                                                                                • SHA256 7c314eca583fcc5eef0e184f2a23bf82b165498b1ae3671522273d79afca45cb
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                • SHA256 23b933ebc130c8c3a5a9c5bcf2f25732b83236e34383f622e77fc719b439f8c1
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                • SHA256 427b10bec559c9b0ef06bad2200bb6c3a72308455923fb755f92204dcec4553a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                • SHA256 2bdfd0045b9bfa6519cbff298db1330b2edeb67e9c182a281ee03dbf49179da9
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Network Persistent State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                • SHA256 85f5d0c2b60b0443109a54d4db59c5c7317e6a0f53bcfecc4e5cfe76753e014c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 06746fbbeb83c9e303e19468de0f95fc9ce8d8f461cce66c9cbbbab85b7d3144
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 38dca352d14b34b1e19fe7bb192cbdff9882d4be2de9c06bd1bd98163ca8667b
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 075cff241e43fbb7190452f582824592ec6cd05ccc39087e6addedce77b36f13
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 25bcfcb32c22b7cf0c58835aa545ab176df02e0f9ad61875505234461405e21e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 cc64e14a0a1a5ae314669e154bc748c61f8c690e3b7b90deb77a1af694a32f0e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 fdc7d4955acbe51f2a8856c5a4fc07948b61832921da236a72abff2e9b842dfb
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 c38d1544bad18fa0d908687b0cdf25e04fe4e0ce2fec69010feec9eebd7bbc2f
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 cf17311d6573fe20e2280d92c2b3f96589cd6abed14b7628632bbb63b6313acf
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 4643726621ef514235d25395d6887c904a497ee14bc36cf12cca4ee5ce6d8d94
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 9c53dd0ea057a9e7c1048500ee1ca225c1bcfd903429e8c5ddc92d2d3ea91a70
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                • SHA256 30cc482299337a90b8e3c6eea0c57b7e45663468f1f008d4128bdf546baf4032
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 d6ba669566f433d6ad4b4b17241aa089aed5a5d1f9b3aed8685b1d604a4c448d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 c72bcc721e2a22627f85e4d9d9bd813ac874864dfda6aa6e323bc06ea243fd0d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 52e7eab854332f9c9de8d1d74baa2fcc0921b9cf6e8ff3da6b023f78d738ac82
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 931fd2b5ace4ce5133598b597796a454f1261df41ce9b96d02d4f0b950a87d98
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 a4ed7e16c5945d7f61d8219d108c4ca82da5a549eed408cde7de483d08bbc305
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 7f6f90a037616aefdddefa87156b02a45f0457ce5d4affaccfe8e78f0010a3ae
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 d92dfe4e5fe9a13150cf67a982b65dc6a2ffd21cbca638e0f325653e3323cb8a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                • SHA256 5b1272b146bbbef5f752a2312ab32be885949dc4fc1e1d404aec2a495e564aca
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                • SHA256 9fb9a3311a08cb6ea887d7e0a8e7eaaeaa23b5dd35fa210d5573860ad847ad3d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Secure Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                                • Size 204KB
                                                                                                                                                                                • SHA256 bbf5521d21278565bb5f90b4e18033df25841028bc8b85d7323e8cf9c7c00e38
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Secure Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                                • Size 85KB
                                                                                                                                                                                • SHA256 18d331a8cd3dbc4e2fa49bbfc43a62182f5b22d51b0a75147bc39501cff2b491
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Secure Preferences

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                                • Size 207KB
                                                                                                                                                                                • SHA256 d87cb9ccce3973841ff2e981ba4120a4cf92031d22a306c8913ac59e1c1bbc43
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\68d32fed-4c36-416e-97b1-9b9843ef61bf\index-dir\the-real-index
                                                                                                                                                                                • Size 48B
                                                                                                                                                                                • SHA256 0e9b385a94aa0b7d062023e58dd7f2cddfcded3462d8b40796fdeb49a40a1c83
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\68d32fed-4c36-416e-97b1-9b9843ef61bf\index-dir\the-real-index
                                                                                                                                                                                • Size 72B
                                                                                                                                                                                • SHA256 a5e30ee94fae7e2009859664bf74e045dccb1cec5b4f5d6eed37e11d52db2151
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\b5c74359-3014-40fe-8419-275828e32f88\index-dir\the-real-index
                                                                                                                                                                                • Size 72B
                                                                                                                                                                                • SHA256 dadb6c956ead15fda55b7ffac2c5052f6d743a46880977d227f76e2afdc340f7
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\b5c74359-3014-40fe-8419-275828e32f88\index-dir\the-real-index
                                                                                                                                                                                • Size 48B
                                                                                                                                                                                • SHA256 48ef796d04681434c9d6f782a8205ffb727985e7b58e9431dbebb44a2ee8b0aa
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\b5c74359-3014-40fe-8419-275828e32f88\index-dir\the-real-index
                                                                                                                                                                                • Size 72B
                                                                                                                                                                                • SHA256 8458dd6cc73e2da62e7abc0ac9319d19d895cf04d64ba433270c22b2bc79c33f
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                index.txt

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                                                                                                                                • Size 233B
                                                                                                                                                                                • SHA256 e3286af40e33eb2cdc5d1e1be7e4cc1dbbbbf0cf8e849ff6649cf947a80c5733
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                index.txt

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                                                                                                                                • Size 226B
                                                                                                                                                                                • SHA256 de9865cb9138e3ab6e0644001c331dc7439ab021b04cbb866e62ccbd6e4cb487
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                index.txt

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                                                                                                                                • Size 229B
                                                                                                                                                                                • SHA256 e3878ce132a15d3c7b073724d07b9ddfee866f502676d491a9c0fe7044879a60
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                index.txt~RFe5ccbe3.TMP

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5ccbe3.TMP
                                                                                                                                                                                • Size 138B
                                                                                                                                                                                • SHA256 ae27444dca5654facbcbcd87b912519da69e9d0e13d3b021ff546394ef79b8f5
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                08b99d499107ba17_0

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\08b99d499107ba17_0
                                                                                                                                                                                • Size 47KB
                                                                                                                                                                                • SHA256 22e5f8042eb1146fb5c84fc8ce00367b8127f1bf1b6a4fdcfaf5198762add9bc
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                08b99d499107ba17_1

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\08b99d499107ba17_1
                                                                                                                                                                                • Size 111KB
                                                                                                                                                                                • SHA256 2bc3b5da42c512f294b903e5e8fc6606118b4ac1e96d668863c4ff5f712a9708
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                • Size 96B
                                                                                                                                                                                • SHA256 9afb286ba61c487e7e712db315192b8fb6c2f884b14a32180beeaa8780d49943
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                • Size 312B
                                                                                                                                                                                • SHA256 9d433d4503abd85a10b177746957dcf0b11229f40a2f6c99732a868078c6cb53
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                                • Size 336B
                                                                                                                                                                                • SHA256 408bc4ca222e2bbcb4a05538c4723e766e1344eea3aae253c9cc1524b5c475e9
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                the-real-index~RFe5c2ec8.TMP

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5c2ec8.TMP
                                                                                                                                                                                • Size 72B
                                                                                                                                                                                • SHA256 1ae008d17677b54469cc32815825eff19d37a8fa28e92a807fafcc7f14c9cfd1
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                index

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Shared Dictionary\cache\index
                                                                                                                                                                                • Size 24B
                                                                                                                                                                                • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                                                                session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
                                                                                                                                                                                • Size 397B
                                                                                                                                                                                • SHA256 7321a27b17376f0daaa5ff4085e75c05e60806c860123d594aa6c61bfd7ee6b8
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
                                                                                                                                                                                • Size 861B
                                                                                                                                                                                • SHA256 03a62d12ffbb6a87512f00fc1a6e5ef1cd3a7eedb2c769a37ce7dcd2dd50254d
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 390433b5de32252c7506ce07dc5617eb5294f44b9cade6a5be9cf667041553f5
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
                                                                                                                                                                                • Size 573B
                                                                                                                                                                                • SHA256 630d8462900fe05fe48aa4d02491c37f6254f23f40c6c19f22a92285e0bc0695
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
                                                                                                                                                                                • Size 685B
                                                                                                                                                                                • SHA256 ff287786757d9d1197b23e70042ad58b9a59bb183801f2e7907f42d8574c7180
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
                                                                                                                                                                                • Size 845B
                                                                                                                                                                                • SHA256 43ba5e5096b0be5a2921d9fb5ce4eafc280e05f1222d45719b387d592edc18bf
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 943be0e56fd62ee78251fcbf0fd30f7e79da152468aadd5cb4fef26fbbff92cc
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
                                                                                                                                                                                • Size 861B
                                                                                                                                                                                • SHA256 48b05b9a31a2efc54bc59ec4778eb3630907e176f3aa28bbc417d670bbce5c6f
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 7d96d5d6c3461d0c019fe70fe0399c267df3194655419249dcbae990cb91fd40
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 fceef190a1d56915fde0d6c5048e64dfaed67c0ff9e4e41c70767568090ca835
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw
                                                                                                                                                                                • Size 1021B
                                                                                                                                                                                • SHA256 ec5ac74385a89fddb89773aa1fdfd6d2a0b105197451db37ed659e670bc287f5
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw~RFe5c27b4.TMP

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_0ad9668d-01b0-481e-8ba0-54b4ec9147ad.raw~RFe5c27b4.TMP
                                                                                                                                                                                • Size 285B
                                                                                                                                                                                • SHA256 18d97a256f30eb8f9eccdf3c6f0e1b6e3a72c54bd1dc03ca2e78d9bd5df02b27
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 bb36c4dd8cf6e205aba16a1757eaf3512b311f42b7abc274f3c427f18fec8b44
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 79d18b1a9b92de0ad28c2220e83a051abd4cac89d6226d643fa95ce70786ea2b
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                • SHA256 6d2683d1ad88828b44ae54373d775ba2ebec60b7f3a673fe2d84d212fab1de0d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 2361e801bf9ca88b95b4f633a4fc5b520003cbaaa071703b34a64c0dc17b459a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                • SHA256 2b1ef38aace0a789f0f30a7fddeb904cba13c2b598d85018d05c24d3d17ac436
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 310618771f6f0a41bc7263d68cbc918c87834e78cefd339f292b4322de30b2e4
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 f978f86a21a058493b4b53b78c33d66f7cc00d64efa488ae765e29af2ac9b3c9
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                • SHA256 f6b8dd2e760592a0db99ae21413f71596e8e48d5bd4c13a440b9968a4e26e9b3
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 4acca09f8492d6e04e3eda08221bef00c26550aa9a857fbf5259d8e278ef72d7
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 ee09be353a0852d83246e4373901e160dfa12a3b91ed8e71a1104abf9e6bcc8f
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                • SHA256 58642997f8e32953c523d13c0981f86a2ad70416e718eede863c437817614c88
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 acc3c8e376244e90029c4c6aa05c29bc81a1f319db8500ffb9ee0fb589d69feb
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 37bf99578094e75d9e416798ab76b309ae22bcee983b11e1490ed4db533287c3
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                • SHA256 ba7441f701a6fb768b583312e0ec0f6264f93a86df1bec5c4a5779be49b84f38
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                • SHA256 77b10bd38cd913cf0a32aa168afb3fb81002ce5566a3128a71a2b7478895e83d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                • SHA256 a21225c58e81332fb3277879cc1d84ddbc5a716eb143121009cc7393c85f7e3e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                • SHA256 fed51517be813ad55596a826fd028fc733f8f141086c02ce133c871dff7c2bd2
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                • SHA256 99d3d890783370e3337d2261d1c695cd2cf773ee42deac65c303214875c8969f
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                • SHA256 2673bb7547fdc3cbd59fcccb640c490e7646975666249476640d74aa7043483a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 11dd7ac5ca17b227832abe09a152c809b5ac411a1bb28f9a3b5ea8ad71612f0b
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                • SHA256 74cbd8bd0d99ba52849b1d35b15de9d3d9272c8f58a9430187f3ffcc65c071ea
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                • SHA256 2de48f11e0885e0707373aa23893118934e255db3843986c31fde65cfd8bce06
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 e74f1aaa65437144df812501e81e39da0096cc31bf7788d8db05c92aa7d2f6e7
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 733B
                                                                                                                                                                                • SHA256 126a9507d5fcc5986188330335cccc9ee2431629bbf33ee814b183384bb17ad3
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 34fcfa5dbae8af03a14af775c838c7139ee9a330305deda2bcf28d82e542c3cb
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 6190bb8323d9596a102f929a71a77d8f13345a79c892ebb23f22c88031af9baa
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 e405298e138543b5f8aeb9ad9f031abe5c08e1344d4b8ccf032717159ced6728
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                • SHA256 59a9e596970719bf5d9f5eab69da61ab99cc16757d75523719b460f791c33a7c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                • SHA256 9b2bcf3cf4841826cfdbf1c5bfd80441d4fe630cc6b97948f3ac53ffea36883c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                • SHA256 44b8aa34e120cd074a07efc4a1910931b112292cb0a673a31ffe02dedee1ebc0
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 efccc2be8ef11688f3d6ed582a548bf9a9a790167aaef36eb294705175ab34c0
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 e559c9b6b072eb6ea4fad0c4e8f298a440b87f1085c9cc7d290a5c49d1e6f5db
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 fe06d5b1cc13dd01a81ffcc37045b0b4fa403952aa0fd652f1191e997cc5403c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 da0a9a71c2bb67975841d40c45dfe623e3b130bdc8c1888ca8e582049b3662e5
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 d048845dafa2afcbff4198f66defc95d56e72d85f9cbaff54c87742448fcc645
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 5d46ccdb225d7682b729f95394d272dfd4ec1e4b99429d7ff43944d7321d1576
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 8ddfb74ad01c0c8e2a7cdf00723cf9b3db30128ae5e1e285f170873407cf1f25
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 ca953122c8ebec3e48605188d40e110a3f98bbb2bf854477507d59d99bb1fbbe
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 aa06fa8d3f0cd8c0713cb84aba6e0280750f99f91efdada55097e6fbc80f353b
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 5cb181f9a255809ce90fc85786f6cde8c833d475b35bc051b316770faba37737
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 463e3121c38e5825f4df9c090d322c8f08aa32b7b9dce537c449aaa3f8e4222c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 b9b4eb200585c1524a578cd1b3a4bcf295fc33fc444676803c5ea5a52f24602b
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                • SHA256 7e731eb329d712076707298c99c42cfe711f6f4e28e187ef4c119b9ae2a0a13f
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                • SHA256 cfeeb8ea830f93ed9b440df0e899657a29169bfc296dd58e9f9689ec7016511d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                • SHA256 7338516f97f1082fe62f58cfbff334f1c79fbf2bc315dedc390c14022cb38897
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                • SHA256 8581ec689b461bd06510cad6a317245b7646e30f9021fe197a0de30fd22b646e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 5acfde294fe41aa362296d470332888d9cc08463ee98ee14b79d475f7f1a76b7
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 07c5b1655a9942ed08d6902246180d4955fdaa898e50ee2a330cde491b0d75b6
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 24ad11ae718d9dda1ccb1ab0ae37285a751459e5986005678ec1f7d44c7be33a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 36c7c101b7e38c02b86b8cc4f38650735dfb4a8bc38085cfbcb8dc6b15df5d21
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 fcc33ff5b3537f54eefe45d1cc87095555f660ac2e3a0c1a56c3cf066aefe1ec
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                • SHA256 a3f96de7818e6065c746f08c1b8e82651369c41d2edd7357c86e1895f34e4acb
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                • SHA256 b55621b646608927186a078161ebcef03af4c34278b000686045cd1ddde447c3
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                • SHA256 86bc1d3ec140688606e29680c8b6e4259f05436d49cbe0d5b9aff721e14888de
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                • SHA256 66d3604b22fc8fba4108dd8ccf41e4845133654af615b36d383d914f1025ce8f
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                • SHA256 b0b7b4c4028f5485ce777e973eaef11b62090ea595c7aed81554dbae60e4a065
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 b89b9dbd89a7f9aa71ecae1f78e2cfe59dc196a150948203d1d4f082013c9c10
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                • SHA256 5e5fc08ff00dbd21ef5b7d57edc847301cf051538ed2f76d472150a38f30b045
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 477B
                                                                                                                                                                                • SHA256 77f02db2cf4f3a611af19a5be72488dbbfa40c113c074c8c587859d28380dc65
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                • SHA256 0ddc582c731ec8223520db49f870288e5c2c3a1f76a002f7dc12c3da25b0fb8a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 893B
                                                                                                                                                                                • SHA256 447d18465f68dc80d570dcdef22ba7de262a1865bc812c97eda6fcc9566a38be
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 941B
                                                                                                                                                                                • SHA256 b4bbd153b01a8fc27f311d15ed327f717bc2eca0a9900d89a1aabca608f34ef5
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 d0d882f1a723cfd146b6c548285d2c91a761937de9930132a42591fc1a2672de
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 b43b03df362a5cfec477a51b80e04f94edfeb12499c863fd235a3b6e5432b884
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 80c3db4845b952eb9e5cbb562532dd9e14b7c733d6aaadac0eb829339a8f60f9
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 832a7ad2b236e002773214c51df9364768db1cec57be8cc6f0ad2dd2be86f67e
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 2ffe741c95a6ae8421a994f44edd9f1bc48b43b59558501b4a28f328aeb19db2
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 7d52279b16f2c4f7ea841947ca89318bd4a406af1c69e098b1ac015ec5ab5fbf
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 8fe7c56e0245348ff7b8f3982072905a7b9257530648cacc64d5e6f50c6337c3
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 fa8285e55d888d46208c4b5dfbd265c2a5fd7af096fdffca93159646a45b9ebe
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 6ca6d0e69d876f9cf6b377c3b8a5a7edd2380c85a0845ca3e1742f57d71454f3
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 abb58fe4113da9488619eaf96f60364b7ddf9859027ad0f9940f2a622a693c3d
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 b400710b8e75fb389551a709e36d79a19a96c1ef9e6da3565b6932654c2e8a4a
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 a2a97842125a0d0226c3cd02c3016397f264a38a9124f322726399cdbe50e00a
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 b22c09d65734bec9cbc53322e61591090244d043e40571641e2cd21de8176c11
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 90ca309994518dc0bdde676e54ce48703ffe5cf6130676f6b7db26a159e5e76f
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 4173848fd521d76f2bc876b20237f35b406810043c49f2d3b67d41b2e69e00e4
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                • SHA256 ddf321494251e91b62a499921f42025c0902a94183e9bed75b6fa3e31e94407c
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                • SHA256 3104bf23903196db2e9b7b18ca26388a282dd4e8660bd8542de912a99023e5a4
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 8c3766486f10da8e36bf9207e0b2c5bd7d1e8d0c9c5468e39719f67c2d1ceda2
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 9e5451620d52438e73e387f50876ebd13c4a9584ef76ed6e5961483b50970e6c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 289066cb9f6cbc1a0b60497d88e601b2d7e1e43b636b15bc78af6fd660caa7b4
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 c67606529901047a5bf38dedc28a20ac354979e217aeb8926ec2e27ebbed9d9f
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                • SHA256 8c101846076adc71f803ef2510e98bf63f342e1e0aef9a390fb4b39cab36126f
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 488a7318b760abdf17724caff26a26886c0dc15c3dc2f7fb22b1d2db1008ea00
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 45e83941138276ea9280c06aef152a434370c6375ba6474300f0f38c91b5fb46
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 e46a3ad16254baf70089b4f6511fb43056bc937deb1979801fe4afca50ed3fea
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 6a8bef8ea4bbcbd3438d3d80b844615afc8ef7b3c54cd2c1a7ff9e7b2eb8be91
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 31da03f4fec73112ca46936d32ce236f783b662edc8c1b4f03639c676c5af1ae
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 1835d1994990b57e9c816c6ce8515853553b902527c53b2e21624063809a512a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 76fdc94f3da9cdd7e1d806588a9c28041171b4e6beef3895e0df4629d8e88b63
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 65a79a0e0d8083cdc1f92c36c157df1018471de9e5dfe25106eff7268704a7c7
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 e00728f788f4fd364cdc7cedfc686b0c8be04a12bc6710b707645dd769df49fa
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 dabe5d053d5a5036146ba17df1c4a3bf2accf94fc852b624fb7a73e61f2f1db4
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                • SHA256 e69a68326a22830e4217e2ed0a01530a68a3bac6faf68e436873b291635b6487
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 2a22455957d1566c2d39c2198b1c1aaffc82d1600cdf370600f333e0d6b92ce2
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 dd580d854c3ef1d5c7f1d269a49c1d02264ab9f53b9a673e2d4f69c175ff97e2
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 7128cbb8a58ac9afd03c508aac586a5a71078f78b9ae33a9dc18a7a6cc1c97c8
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                • SHA256 c56b9bf3d8ee7f9a0ddab419830df8b2f14d220123881e2fa65f4fa6f197be4f
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                • SHA256 62a1fb04dbb3554a9c52debf6802e5f0652eee1056b691a468094f2e353c89d9
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                • SHA256 25ac396da38f907ebe1765c6334efb5ffe8e4f43af3d6b84c0e2cbec04688245
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 ec45af257a58708f05db38de80157e71946a6b2cbe63bdd2980ff64b0afced7a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 f32a4dfee848965f918e5828004bf03f7bbea2085a4e6f44e853fcc0d13e3ce7
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 19d9b598c66f02ab774897ed46a909c5fa944edcf9dff1d34e67efb6a31d887d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                • SHA256 6695c4591d494bf41982ef76f3166603c0d465047a89987039895de1e598a2f4
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                • SHA256 a396e97b0866de8bf36d3d9535e3631a1d72b28c4ebc12e841b76108aeacf9b2
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 a72f0ab3bd674d1c28f96c7cda383ef994eabc90ce157de78e2c3d531e0c7a6e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 99a44f5a0f1c1235bbdb554b82614307faa4bffb4d499dff9cb5dd267ed08b63
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 e2f454641c57e1cd379745d8819c3888b1437ca4a4ad2319c64c2ebd234fc0b7
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 5ab783096f357a362911692fa0768287bb744b03be90509fa493bdfec53a1e71
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                • SHA256 f699ad4bb1b872ee07c9e39ea130d0645f12843b789b27b2f9eb3f18464d92ec
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 f12844493f8c0bfa752d1056f3afe233c9d2fb100d36e17e49e5b3c038125fd0
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 6fbce2094c477391b18430ffd1e30f6bec7b84ac59480a395db10b983c8fb12c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 18c476869688d276f911948e6cab730f70422acb3e40cab68ce62efebfecb2b1
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 bb4c23039e60a9b1b0ad3aef7b6408a6ad3be0c091049b31f0d87f68a10d1a58
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 5526ffc00d57554c9189c5b476662c1080e7eadb97a66ef45d8319a3c62fcad0
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 e41b6078f87a5f3c43f5d98c52325d643c5fd6ab82235e0fd57e638a3a50e4d8
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 5a78ef1d52def6dc72efd44cac4b98d6bcaaa705d93cf9c5453d0eec1e16e1e1
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 dbc4bd478d544f1a7526e68c70b504c3a04dc63d2eef8b2df69bb4b967ec5fd9
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                • SHA256 48bf43bca36ae1a499da3bcf92c25754f343d9c42e707e29b018bf362bc29a94
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                • SHA256 d7b21b09817700b16a453e69eed9f1ad023e1df8d28122a444c3d10a85928502
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                • SHA256 40df6a8f1e99275c9afdae282179706d2c403863ac40f6e4bdca9cbaef680205
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                • SHA256 2ba2fdec555cb24cc5247e7396e7833cfffb65ed3f497178a7b6159ed83e0ac7
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                • SHA256 aedfc9a460ff88ddef58871513acc2ca1e042cb7e56d34c462a0f75356fdc09a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 751a4ff4f9b00fb23d2917dfb9fc03dc879e894731de0f8fed2b2a1be0da7f5a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 9594729909a84cbc7872ca3a989e2b8f49be024c6c834a3ea2a6491907e079a0
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                • SHA256 f7360a09b5be9cb4e8537b9f38998b9826f9bf0918100e169cd1efc17d4b1a29
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 605B
                                                                                                                                                                                • SHA256 22d0ad2469d50dd0d9ffc65881bfbb0216bab96658815a54f8552c71b2d82263
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 1790d773345c38a18155f93fc51e36bc9a96e5c4e91e92edd846f23eb44f7714
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 463a043f8e0506def57bc6afb32c5e823d593dec2b6e05c143e8ede8a5bc9224
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                • SHA256 40c709ef0d171b57e121109abfbe4411db065605249a021ea341444a18fb5426
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                • SHA256 8512d0d7eb7e31f8c4ea546af005a9af62b9f1ab889cbb8f6fe81706d06179f7
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                • SHA256 65fc88f4f385d2a226b3677fa5da1980eb5897851a04e49d9f8206bb80cf40b4
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 7b9c0e6b634d2e8e985aabe1d62d8334025ccb24ad408ff0138f051fdfb908b4
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 91bdb9f2f1d83b76b966020391f16cec43fcb68d7b779871ecb4ab408fedce18
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 090e59e3be8250b26d9443716638bc773ac0ef939b42597abc892d5fb4208310
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 f50870b291aeefb29e9059f559ee1604dbd1aed06c7d483a49da9d341f7a2a3c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 2a5c740eeaf5967219dd9d6db8fbba02808298dea73100996e7283bdc718bcc5
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 fdbae47f87b701ff51df048b48cb598275dfaa78d005be570b35dcff91e96b22
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 1cfd53951abea19303669962a5c52864c6576f2b525c28b4067affc87df6e293
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 e8eaa9fa88dbc36dd5d7d3f9a4bd68045e408829a2ac7fe58c6fb0483805c631
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 f20864ca0caf3c8dd220a7f8841f3f86d60d0fe5f7ab18afba3af3d79f53760c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 fbe6a8f256d68347fb181db17ca95ad4422d015addca0573812de89f5406d756
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 0730d23c5f2f752ce5791b7debeec3837c860f0cf8e3a0717907ace91bc3f02a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 0bc6056cb3f57905ad588ed3f38757c2e4ae90690b3e6f2907736dafd41ab981
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 2f5e9074ddfb772238d9ff17e92bdef23b138d29b58f5b0b0dbd6b65840d9f5a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 701c9871719a3c4383e611c56cfd5feb8af4e9d666ec4bf2052f8587cfc5dc7e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                • SHA256 93b9d906a448d3ab4346e4c49f955a6f9a56fd0a702498857cff623fc5a14dde
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 3bc838d59a994dda6e8941140da4af099fd8ca40755f253a5fd2e62ba8b01253
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 19af85e5f4e4572b9331a5c6b61a726613656fbbf8807d4a1753dcd62ac1d3ae
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 cca843c3a80cd8608fe7dc42080b72162e5bb7a8c876b35f4bb2f181872cbd86
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 60c815f5eba9a8c60ed64a9f1cab363eb3a558b597ef64983d99d4f7e79eeac2
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 2e23d4bc00d10d880ccfff606e6e18b3c0aea79414749736cc63bd774669b90e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 e2773779e9f9c2e71de4401924f3638247669a0bd839a36ce2e03943ba0927d2
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                • SHA256 54f4f16e6eefd618d0e4e0ffe28977c5f34d010370429f522276652ed91cd8f4
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                • SHA256 91f296507cac09824c44ec7b4ed312d6e1567988e643fe3cf9f0feba401de6b2
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                • SHA256 19c65ec8e0baf1ad2bacb400083efee3d5137bd295838d4e1d8d994ec38a8798
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 2272b3e9862131eef3e0c44d61f772bdfdaad2d7f4ffb655bde063e09e6ced7f
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 05445568a7a531a4bb9cfbb67bbea60c77909c8ecac4652af0232bea88331bc8
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                • SHA256 88a195e04ab55ab1d730091f0fc88203c8edb3f986be0e358f17a64252bc127e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 c260287c8fe078d8a139949865ab2c416eb3a7714fdac70c4fe39845ea965e6b
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                • SHA256 6b5e7497736553c4f66881ef0bf325663db5441b75549ce4e715b8d4ee79766d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                • SHA256 2f85736f4f42ffe32a2d534662a980fa40ccc781de3152733b68f18dd7b09f17
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                • SHA256 0f6d9807f7a33900b903faa9401476c5032fbb43b96c1a7be48ae8736c29c4f3
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                • SHA256 0ffe6b796a748af16202169e3dead46237bbcbaf53aacbe71d3b8423b5224831
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                • SHA256 0fb66c397845ae9923d99fe28e2f5257bf0f00225be12bcb9ecee9ff8917da2e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 3546a25e1f1513debca7c3431caed17563ea7d9c3d1bddfe126c10f6a2d4edfc
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                • SHA256 97b11801aab7636f3f7a4055001c447fe1de4fabcdca383020861a60f6d09266
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 63223848bc1386d12801e4511e789ac3741372ebae832a66dc2040c8d6deb487
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 c37798268ab0445ee923ab2a648e8c39fe50a0b4c425503441721522f9f12717
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 07677e691fbbe5bd65055b2aabfa25c7440850df3d75635dcf2ff15123cd7407
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 2895e23df93af46161371d58a1f2089b6ea07613f57343d7f8945bbd38677cdf
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 e5b621a624f04ec17a302a7795a4ee36396b190fc6d46e792c07263bf0460a54
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 3d3e8527d6dfb466ac19917a9bdcc0a121eb92e28e7046b3cf9e26ef98363151
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 48f0dee51ff6229c796bab9d20d34abb06d29a41e48db41402c52102bdd2a6c9
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                • SHA256 13215239c3945b28e4343139531d17f243ef8b09c6c7535bf799c646362d54c7
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 834c219aa2036c701558e942acd8f47afe6eff6ac7d4f2101e3e2c39e49dab48
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 2d5bb1685ecec01324450fd24be07722670c5b1e8a41ee5b0bd0f88b6317bc1d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                • SHA256 055a1326ed52299834a24211fd139aa0e4e4efea00ef93b76c6e66959a0d3d8e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                • SHA256 8767e9fccc7703b89f4b4346ad7afea92b5793489755043ef20de6b939dcca3e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                • SHA256 c0ab906c0f99b53d6c4d43e42e6e3388d1fde0fe06556ee3b199c692c252d438
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                • SHA256 91e2b734d84ad86c3a2f575d0b7ead0574a10b7e8716bb127f624fd6a07972e6
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 72e7a75ba4de1d8cb97ad4c67da00ed0b049ec10d3874e76ad3ac98763923bcd
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                • SHA256 cfd269140a1ef505f0bd60e5b08e842485c8368e5bda2b5ae7d29c66c8e174f0
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 11KB
                                                                                                                                                                                • SHA256 369ae9ccadcd5e06ca7999138ee03dc8213c40fa5cad4776483a885db072f09b
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 5b2ef1ba1e5d11d7ccbe77d76c76cdaedd1d03aeb09b9378241af322199708e0
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 d78af9232460b679d6799b7e58bf89312d520b248ab5d3a7562fab1966b7a509
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                • SHA256 eecc46e5f64cdea897c4c34cbec3ca58827f82d3947cd7d5e8ad4496d09cf263
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 17KB
                                                                                                                                                                                • SHA256 1e249824f5907d1537fa7fa0985405a2ae1e53bf67a147efffaada90a51f2a75
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 36e06211c777e902139b6d60fa2c00f0f5014acf7369b1bfd57e77aaffe461ae
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                • SHA256 81ec1a7026a05576da0aa7311a257c4e533f7b941dbdf7567aa5722a5a3d2c61
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 23KB
                                                                                                                                                                                • SHA256 daf695bb9868676986df527fdfd258222d0454e6e61c7f46bb324a67731b06f6
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 9KB
                                                                                                                                                                                • SHA256 394c99c799fcf550d6266b3996be6376c0dc025f67846d1a30066a5b9bad5533
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                • SHA256 99a26959da997a11ead52a20af1812089872eb79d79528e08bf9229a8afd7c6c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                • SHA256 118dd63ce4a9d2dd2753a096c05895469b52fa86bf0fb5130b91763416d2bc46
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 2f63758a45cf31a462dac7a087c3c7d3d142c709b5fae6d0bbb39d44767612b2
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 13KB
                                                                                                                                                                                • SHA256 afb57c3eef9c3bf184d2e4a743cb2261d13c7bc42233dc9cdfe0e86f32c3f0d0
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 7d8aa6064b528cae67dfc27424afc7a546d9b2a314f9f3586dbcd5a375fcf14a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 ab52d90ad324f5a196882894881925ce0e7747502d4c3add46de6798f0629269
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 15KB
                                                                                                                                                                                • SHA256 bc9a5f8bd0e003269fc99a5c656aa29830148e872665c9b85f9cae08d4b94ebd
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                • SHA256 77c18525de05c23315fcb3b12ab42ee934d3042e84858227192e1b59726b8ccf
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                • SHA256 13fe36e16a8a2535e2658620d4a2d8198baa67b5033bcf5a8810bc1c55ec7c37
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 768904af98cf6afd21e5c6378094e508e617f0d1fdc2879af8a61dff5bbcf893
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                • SHA256 2d37e9ab38176818cdbbb048ab14c5caf232a09fb8b2a4e465b49f4034e89693
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 16KB
                                                                                                                                                                                • SHA256 4007478a9c08087056e65155397196f41b51ea9d261007c832e41069a817aafb
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 b89e64f2a8237c65f482c4d982fdb64f19c3a004f338ee6bc17054d0a6c0be34
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 f6afd8b48e18c1376d02f5f74422c0216a5e804bd9be4621cc6cd4f843e7a5f6
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                • SHA256 a17802b0f61fd355688c1b5d5e3db21b059499a2035401b9e8d7f1bd7c3a76a3
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 440c3add59936e4e65a2c8bb9e60bdd3e9bca048a244ee06d1304aa5aca7cdfb
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 c37e400c6800be8c7e1e1df569a76a833de593bcc56ec1c993a18694df77bacd
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 b373062e7e524cfcb260276474acdf5d091d5710e7d5f333935f6ecb7e3dcd54
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 14KB
                                                                                                                                                                                • SHA256 0a54548b12b42b3be6528fc6566a42e9050df9a6d1efd06b019a754e4cb47154
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 cc4b746fe0cb7fae2da508c72ced83ce4df7ee9c5cd8118c07ebdefc3538fdd0
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                • SHA256 f08239aa0e99a3f4ec11d312864aa0061b05261142835b570e2134e80392747c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 46a2e6d990ba05098c868a3fd26550e0193c5574a2f26562ab1073483d024fd6
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                • SHA256 3ef008dc536aeb8620de69421410f762308949bb21a2d50efad0f3632631efcb
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 d8814285ce3580125bd3cf3f86af27c79f0b3e99a1f7cc339cad0950f88e3bdc
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 6059c804b10111baa08880f1cf162a4fdebf1935f13bf29d8d5ae01cb1caaf70
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 ac943ad0648c9f055a5ce4bbe7436e1f6fb6ae32e6cc78246fa04520657fc3fd
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                • SHA256 89e719486b4f24e6ea7db59f6a87b8b2da51931eb72e2070dde1206a07777b68
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 7347b3e0f3a37cafa9679b343ffb9bc425127e6a7db5d464661feb9e30d06965
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 8d13246fd0f342e27f64409ff820cb4144ee677c4bb2887996cc84e8d1308ec7
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 bc2894e41fe7126fb47b6ee48ef37a57fc04dc4674ec0c89e41e79355c4d1fa8
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 60204ee68a8ec18f2ab39627732e4c5e03e88e2acf60da6eba18c4a1c51f015b
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                • SHA256 6911dc1bc8e6489df0ebbe59f8c63ec1c2dbcf50542df896be547a226a25e5ce
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 19d26ac151a938963f3129deee745aabbed8269bde0d4b1bd66852e1a9952cfd
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                • SHA256 fe8f4807404e600e22753d1e29065962e9c5c9977ddd84244de9d6b8dc4eff1f
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 21KB
                                                                                                                                                                                • SHA256 6d1ec4f1667f42fa9ae978c8cd670a68bcee819b91eb31d63f8fa6409fad4ee7
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 22KB
                                                                                                                                                                                • SHA256 cc91ef85778fce2ce9a0b7498117c225b54e3553aa89255e60d6ff58776380ef
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 fb8d949b3a1cff6a3624e15667f36c8d85626ee31b824b3656e44b9440a58c69
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 94e9c3ce5f185caf64f777db629e712902857ff582f5d18ac939cc2f31f9d8c9
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 4a42025026e3560d704c6230ef1cf23fede06c35d9cf3a2e26795a61eb3114ad
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 fe5ded7dab64626ffa8d146eb45877aacfca26c7d0e41ebf122aff5df9748b30
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                • SHA256 1bd9fe07f11e16e8b79d42b905c1c14a6ad9602bf8448ae402489cc369e4d92b
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 12KB
                                                                                                                                                                                • SHA256 6559eff2a3d71928c89a0b9cd96371e81a4e9b4cf5c732b08139007922499f1a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 18KB
                                                                                                                                                                                • SHA256 46b5f18fb4e56b4e25ca14a2b3653f2bcd9d71b318146ee3c5b09ed4d281a418
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 19KB
                                                                                                                                                                                • SHA256 b2b15044ce02dba99fb1e6f1ab62aeb7cf05d361de2990c44e349f401f9dca3d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw
                                                                                                                                                                                • Size 20KB
                                                                                                                                                                                • SHA256 6191723861b2e9b70034e8edcfcb1127cb373cae5eabf47287e5b4ab7617597d
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw~RFe5c4b97.TMP

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_8b891a04-8ce0-4915-a7ef-b3f9cb84016f.raw~RFe5c4b97.TMP
                                                                                                                                                                                • Size 381B
                                                                                                                                                                                • SHA256 1985629f36d32430fee63523d8cf2b9f6efedda2e1b63751d12e08a389364d8b
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6000.0.986562397

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6000.0.986562397
                                                                                                                                                                                • Size 265B
                                                                                                                                                                                • SHA256 fd49b794d000c24907d2a265be667ae3c2e4407ea366621a596bcaf74f7c1b3a
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6000.0.986562397

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6000.0.986562397
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 617c420fb168a8fc1a73039b18813b75ff3614774b4ea6541ae0d411616d3437
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6000.0.986562397

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6000.0.986562397
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 7e2417dec115ad30f03332ba8ef04bb415f77fde68d915d59839f3218a53193a
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6000.0.986562397~RFe5c2f16.TMP

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6000.0.986562397~RFe5c2f16.TMP
                                                                                                                                                                                • Size 203B
                                                                                                                                                                                • SHA256 e376bcefe9591e34dac113001ea0f643ad67ce491020c58c7d78a76723a4f1bb
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 780B
                                                                                                                                                                                • SHA256 9bc5eeca35b4c43e102a178d28af2ba599b848ef85a1f75763fd1974e98c8689
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 870B
                                                                                                                                                                                • SHA256 8b9d1c4e0d797a2b5ddfbd2cec204dade76c502e865d27a9bd428b4332546750
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 966B
                                                                                                                                                                                • SHA256 3f0043bb767992933691138995c081f18b9c89d0588f0e1425f93c106a2620d5
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 32a71eb2f462f72ce61f617a179c80dce5563bfd24ed4086115000231de7a6ae
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 ca5d0050277f190a974c6eafdd851bebc5acd319ec07de416859d88b2f62182e
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 1e8c4737cba403214a642a530e4db0648eb0d955cb0d2afa30a0cae3fd09b26e
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 0e2e82af3fa95c88546115bd0d9406acab68bec7ec072d03ccd449465bd50392
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 411dda776a78bf47551f573c5f8aee208fb5e025d8f806ee76be6a8136a8df73
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 67828c45c574419816ae8e3a9ac237f436270507d7f3e1b8cd25de88aa595a1f
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                • SHA256 30426dd6f6245076150a286dc5400ccdc93e4d31efa47c27b3473076008c8f44
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 505B
                                                                                                                                                                                • SHA256 6f7aa58b84f16e5cd9e89ce81e2cbe4fd052f1f22f89d06bf10d5c36113c2e64
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 693B
                                                                                                                                                                                • SHA256 f2aee6248e8d2c2b12eb4d9f8fc693128a0d746ff530ccdafd13bfc6ec89d666
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 2KB
                                                                                                                                                                                • SHA256 02cd5c5ad214a06baca4e25973577e0177133e5bda0fcd9eb7aefb4300f9f733
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 f5b22c79ad54604682b070d3662e36f15777f61acb9af3e9ccf7f4b174357b80
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                • SHA256 bce0eceda27d6931a5333c69742e681ffee81e46aeae7850aa90fee2823a9acb
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                • SHA256 38bff629321cb627d6af72714c0a0943113ce6be7ff1b1c7382677c21520a762
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                • SHA256 e2b67329d4cee7765ce4a37b12f0d046a0bd2de1aeb21725cd0f9865ffd84db9
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                • SHA256 ea70866331c82afe1226274cd21a84189458d1852db280dd0c9b591d3172b4a3
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                • SHA256 1c873ff3214b3359c210d23b0ffbe1fdc74c0087beb106979119f87786b89b33
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 603B
                                                                                                                                                                                • SHA256 9c2d5e72de521b3937bd2c23568eeb46bc1e30fef952c5998e8e982ccf4b0522
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                • SHA256 a9742705f82740317c09083b203c42925fe8591b6f97ae835b9145c18ea691be
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034
                                                                                                                                                                                • Size 4KB
                                                                                                                                                                                • SHA256 c35b7b148428826bf3b892ae531afdd7911f0cfff0322863d744c8fca664f50b
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                ssdfp6368.0.2002241034~RFe5c520f.TMP

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.0.2002241034~RFe5c520f.TMP
                                                                                                                                                                                • Size 412B
                                                                                                                                                                                • SHA256 51fee074685b0a2d1e07d44137c3da2e4389d57a7def03ab84f1cf3982f6b7b1
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 8995bc3bbe2d25cd9231edd9324389626cee035614e07d3baec10d63a8330046
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 fd84d851f6b1c02baa11e264277af14f78bdafdc9dcbbc6ab99bf43eaa350b45
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 e3145bb0e635441ba127362662f029597bf5b0cf9bbf559452eca18ea572f72e
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 36a5aa94c280ef96718de7e9754f08d01b3400afa2312df47581bc93f159eb0e
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 a9f74611700cae4086828d0cdac62b86be7b81e5df744afb7b362ee03f264f5a
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 554f98f4aa27ab0b42cc6b1c363cf25b9b066f25be3e97af4bb7ea0e18c7d4f3
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 86780701a550ffafaa2ca777c341b627f55b04bd874140fe607ccf8d34c9e86f
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 36420472a44f1f823ee4f66b16131753680b0a577d66d14b7fc3d167f4c22cd7
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 474B
                                                                                                                                                                                • SHA256 42ee4c5897392aafcc04bcc4aabdb7041963ac83c50b3a7270d856bf70fca4d7
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 b7f10d1c0b72df78386165dfa5b6108298d9f4b4680118fc2c4ac4807c6f4ca7
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 b470633edd9932902007f8749544398ee4ca5a1a980cea0f71cf9cef3e33fee6
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 4eec97b74332ee6e5fca91523d3364bdbe227f1e60f22aecc337bea942516f0b
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 5f6455e1ce11933205d90e369eb0c96f7a3aecfd1df647041709c29783d22670
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 9d894f8919748c70f41a3d0ac048075d0d67ec178ba30b2cb4b0c738cc7105d4
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 200B
                                                                                                                                                                                • SHA256 d358d7f71ad84ee42380f7409897c13603f114a9981dab1e7e511874f95898c4
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 16332b9f41ee2e356a9d5da3deb726eda9574c79a5714ca95a39f275752f0972
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 6c1cbafd2700a85b521bf66add6ed2139fc995995217da37ce0305a315e9c350
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 381B
                                                                                                                                                                                • SHA256 10c3dfc38416cc6df4070f26b02faa71f2e8750221d9d3cefc0fbc25746ec2df
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 84f5f026cf8fad73f47e1c8a76176e0f0fa9339a06510cd55ff04e25e5a6527b
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 572B
                                                                                                                                                                                • SHA256 c3aaec933243fb4aacd6ac5df54cd2d010a731c86edd79daf835512b196b02da
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 662B
                                                                                                                                                                                • SHA256 5271d621cdb56e110de791079a500169643b9850a9cac490928e8e2a1a5ae2ae
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 96d1d5aab695f7fcd6268678a4909900bb177277a2ee4167cdaa4d0bdf9f4d1a
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 839B
                                                                                                                                                                                • SHA256 0e2f1f3eb6b55de449e5dc161b0a0b888ad1e087a423d4db73b5f77916497472
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 749B
                                                                                                                                                                                • SHA256 71470501345bd0f61f91742213a2549b8a4ca660bb48a491f79187e126b4b43f
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 60356c3c8c44a64e88bfb1bccd87bdc0403b135b19149c5abbda3a38d1daa5d2
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 bbd7a7ffcadb700ea303988f1e01d3eafa2de0605523678f1706aab4c951d0ef
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 99f1d7e5d62791afc6f992df9e884069e56cda34c7983503804371b6c28e91e8
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 99cc7f0de9ca5a5bd3d4984a71bc66f9af1469465a115d97491a7b986250ee96
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 b10a10ed697a15eb178909c871eee4c0dabc37d3e511e2fecc010c41517d3f55
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 935B
                                                                                                                                                                                • SHA256 3ebe7425a0ca67ba5f0d96ea577c3767b9d0f56736d1ce2ad7778a54629859d0
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 5f17337a06ee6d7a5825dad24f43468f408edde2343d215a8943b7c18bcd6ed4
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 ae2f0d146d7b3d58676ab43b57ec5536189b8ca960aa624fd49daa0f7cd91f40
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 e3899c199b51cff7e6c7b34d5ebda563e8756dd088bd9e4ce22e393d551a9aa2
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 6630014d473090ea25345d77224fe54d3542d72d4eaf78d37d628f4d8ebe1ba7
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 af5c765254d8e05a164f7317107bdf768b35c2f815561fb40713f40a856dc90e
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                ssdfp6368.1.1035127296~RFe5c578e.TMP

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6368.1.1035127296~RFe5c578e.TMP
                                                                                                                                                                                • Size 171B
                                                                                                                                                                                • SHA256 ec1719853c89a489adb35304f23edd536e7deb571034b182f087b463500f94a6
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                suggestions_cache.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\suggestions_cache.json
                                                                                                                                                                                • Size 649KB
                                                                                                                                                                                • SHA256 5e402dc32589de2419a8880117bd538493f6d4ceb02e148665e7910fc8798d5a
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Local State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                • SHA256 e624013dee01be427c43486050c6c39c5fae400cac7e11e18af6b1c5328642ad
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Local State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                • Size 5KB
                                                                                                                                                                                • SHA256 0d947655267491d3a6569ef8babd7c7b5a55bdce7bc94b2a9ed0f17fe2aa83c8
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Local State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                • SHA256 69dbd4775e25e6ff8a8cdb047e52217ac59b706251044da82bec49a203ec2bf7
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                Local State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                • Size 6KB
                                                                                                                                                                                • SHA256 ee03498f53a3f0605387bfed2134c21b60c89521f00891cd31f6e85db1ee6f7c
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Local State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                • SHA256 1b99c22ae880ffb25dc6536bc5ce5fb75e16a30056c00b09b96f96fc618e5acb
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                Local State

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                                • Size 3KB
                                                                                                                                                                                • SHA256 51abb270d0f4016c9ce9a32bd540b3e1e2d48293996c0e83632ced3ae55fc71d
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                preloaded_data.pb

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\MEIPreload\1.1.0.3\preloaded_data.pb
                                                                                                                                                                                • Size 8KB
                                                                                                                                                                                • SHA256 9b32ba9222d44bebc479ffa9704d2a9abccae153982838a3b9a79846b80877a3
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                Google.Widevine.CDM.dll

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\MediaFoundationWidevineCdm\x64\1.0.2738.0\Google.Widevine.CDM.dll
                                                                                                                                                                                • Size 2.7MB
                                                                                                                                                                                • SHA256 cb190e7d1b002a3050705580dd51eba895a19eb09620bdd48d63085d5d88031e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                verified_contents.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\MediaFoundationWidevineCdm\x64\1.0.2738.0\_metadata\verified_contents.json
                                                                                                                                                                                • Size 1KB
                                                                                                                                                                                • SHA256 43daa4139d3ed90f4b4635bd4d32346eb8e8528d0d5332052fcda8f7860db729
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                akcocjjpkmlniicdeemdceeajlmoabhg_26357.crx

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Opera Add-ons Downloads\akcocjjpkmlniicdeemdceeajlmoabhg_26357.crx
                                                                                                                                                                                • Size 1.6MB
                                                                                                                                                                                • SHA256 75b4bfdee44a9d9745a1aeb48fdf8728767db078b528915b27ac94e2027289fe
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                crs.pb

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\PKIMetadata\1639\crs.pb
                                                                                                                                                                                • Size 313KB
                                                                                                                                                                                • SHA256 17086e62df27938f626b008f1691aac29629252533561a3fbb4513eb9878961e
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                ct_config.pb

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\PKIMetadata\1639\ct_config.pb
                                                                                                                                                                                • Size 54KB
                                                                                                                                                                                • SHA256 49bedaa545c1f71b7db3787a0043b8e599923034569b54a10401fe75f77c7476
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                kp_pinslist.pb

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\PKIMetadata\1639\kp_pinslist.pb
                                                                                                                                                                                • Size 10KB
                                                                                                                                                                                • SHA256 83217837be3107187568f9fc743d7f529415786d2459b6dd125d52979f8bb802
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                safety_tips.pb

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\SafetyTips\3091\safety_tips.pb
                                                                                                                                                                                • Size 180KB
                                                                                                                                                                                • SHA256 3e2a292d081a583e0e612d9d7882898da20a966ee76c0a9162b271f8eb043360
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                assistant_prefs.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                                                                                                                                                                • Size 151B
                                                                                                                                                                                • SHA256 922d5ff48b25e3cbc25a702bbdc492aa1b2fe223021d40140351753470c516b2
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                metadata.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                                • Size 572B
                                                                                                                                                                                • SHA256 ddda121cef0c0e0c268894d64721d3fea47b3fe9cf180f5e0cdbdb209e1fa5fb
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                metadata.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                                • Size 236B
                                                                                                                                                                                • SHA256 fe2d20b3c73cc19f7763df6e9993ab5035ff8e9d8865666b7e71dbb158fdc054
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                metadata.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                                • Size 124B
                                                                                                                                                                                • SHA256 89f98a8f89156c65a869f39eb4935e7e1977c882a47c2d21269652a2090445b9
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                metadata.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                                • Size 460B
                                                                                                                                                                                • SHA256 30bf6d32a32daa929cdfd252c3ded29939e61e995345449a5ec289ef71e5439a
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                metadata.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                                • Size 684B
                                                                                                                                                                                • SHA256 702a68704c08342278aa7168d0a6240a557393b52150566bab0cfa9d38b2e9b7
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                metadata.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                                • Size 796B
                                                                                                                                                                                • SHA256 05bfa7519679a0c99d701f654adeeeff32347a4064eec1398dacc4bd0cb9d12f
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                metadata.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                                • Size 908B
                                                                                                                                                                                • SHA256 b6a94010ba69852dda6839eb800a02d4d27743dc7f12910fc4843e69eb3b8163
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                metadata.json

                                                                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                                                                                                                                                                • Size 348B
                                                                                                                                                                                • SHA256 8e3ab2c705935cc17c8c3e79f5a7bb307385163bea434315bfc6742251fc8294
                                                                                                                                                                                • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                                OperaSetup.exe.crdownload

                                                                                                                                                                                • Path C:\Users\Admin\Downloads\OperaSetup.exe.crdownload
                                                                                                                                                                                • Size 3.1MB
                                                                                                                                                                                • SHA256 da94f0c6bb433e63e4f6ac5510ca3430c011d83a4e22832fb824ab184714572f
                                                                                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                                memory/2188-9313-0x0000022560150000-0x0000022560180000-memory.dmp

                                                                                                                                                                                memory/2408-5716-0x000002A59CD80000-0x000002A59CDB0000-memory.dmp

                                                                                                                                                                                memory/3676-4620-0x000001A804630000-0x000001A80463C000-memory.dmp

                                                                                                                                                                                memory/4120-5339-0x000001DABCBC0000-0x000001DABCBF0000-memory.dmp

                                                                                                                                                                                memory/4144-5343-0x0000025076190000-0x00000250761C0000-memory.dmp

                                                                                                                                                                                memory/4216-5351-0x0000024EE92A0000-0x0000024EE92D0000-memory.dmp

                                                                                                                                                                                memory/4472-7877-0x000001C1E8D30000-0x000001C1E8D60000-memory.dmp

                                                                                                                                                                                memory/4824-10038-0x0000021C30220000-0x0000021C30250000-memory.dmp

                                                                                                                                                                                memory/5588-8342-0x0000020270280000-0x00000202702B0000-memory.dmp

                                                                                                                                                                                memory/5876-5337-0x00000237DA600000-0x00000237DA630000-memory.dmp

                                                                                                                                                                                memory/5960-2337-0x00000197AFDA0000-0x00000197AFDAC000-memory.dmp

                                                                                                                                                                                memory/5960-4659-0x00000197AFDA0000-0x00000197AFDAC000-memory.dmp

                                                                                                                                                                                memory/6208-5905-0x0000021375510000-0x0000021375540000-memory.dmp

                                                                                                                                                                                memory/6216-5674-0x00000295AF840000-0x00000295AF870000-memory.dmp

                                                                                                                                                                                memory/6240-4615-0x0000018A58A90000-0x0000018A58AC0000-memory.dmp

                                                                                                                                                                                memory/6240-2803-0x00007FFBD76F0000-0x00007FFBD76F1000-memory.dmp

                                                                                                                                                                                memory/6240-2804-0x00007FFBD7650000-0x00007FFBD7651000-memory.dmp

                                                                                                                                                                                memory/6336-5341-0x000001BEE3A20000-0x000001BEE3A50000-memory.dmp

                                                                                                                                                                                memory/6368-7379-0x000001F0E5AA0000-0x000001F0E5ADB000-memory.dmp

                                                                                                                                                                                memory/6448-5334-0x000001F7ECF70000-0x000001F7ECFA0000-memory.dmp

                                                                                                                                                                                memory/6452-5329-0x0000021B4AF70000-0x0000021B4AFA0000-memory.dmp

                                                                                                                                                                                memory/6484-5345-0x00000237A5AC0000-0x00000237A5AF0000-memory.dmp

                                                                                                                                                                                memory/6528-4548-0x00000187FAD40000-0x00000187FAD70000-memory.dmp

                                                                                                                                                                                memory/6544-5338-0x000001A401470000-0x000001A4014A0000-memory.dmp

                                                                                                                                                                                memory/6596-4547-0x000001E3202E0000-0x000001E320310000-memory.dmp

                                                                                                                                                                                memory/6632-5352-0x000001F5E6B10000-0x000001F5E6B40000-memory.dmp

                                                                                                                                                                                memory/6712-5340-0x00000123DB5F0000-0x00000123DB620000-memory.dmp

                                                                                                                                                                                memory/6740-5335-0x0000011984480000-0x00000119844B0000-memory.dmp

                                                                                                                                                                                memory/6768-5353-0x000001CFA2440000-0x000001CFA2470000-memory.dmp

                                                                                                                                                                                memory/6808-5332-0x000001EC11980000-0x000001EC119B0000-memory.dmp

                                                                                                                                                                                memory/6832-5342-0x000001A96D6F0000-0x000001A96D720000-memory.dmp

                                                                                                                                                                                memory/6892-4549-0x000001A77AA90000-0x000001A77AAC0000-memory.dmp

                                                                                                                                                                                memory/6904-9977-0x000001AC50BF0000-0x000001AC50C20000-memory.dmp

                                                                                                                                                                                memory/6936-5769-0x000001FD17FB0000-0x000001FD17FE0000-memory.dmp

                                                                                                                                                                                memory/6960-5904-0x000001CBB4270000-0x000001CBB42A0000-memory.dmp

                                                                                                                                                                                memory/6976-5321-0x000001D1E80E0000-0x000001D1E8110000-memory.dmp

                                                                                                                                                                                memory/7084-5333-0x0000020A6F420000-0x0000020A6F450000-memory.dmp

                                                                                                                                                                                memory/7088-5328-0x0000014C8A7D0000-0x0000014C8A800000-memory.dmp

                                                                                                                                                                                memory/7200-6046-0x000001C032170000-0x000001C0321A0000-memory.dmp

                                                                                                                                                                                memory/7328-8539-0x0000015688480000-0x0000015688481000-memory.dmp

                                                                                                                                                                                memory/7328-8534-0x0000015688480000-0x0000015688481000-memory.dmp

                                                                                                                                                                                memory/7328-8533-0x0000015688480000-0x0000015688481000-memory.dmp

                                                                                                                                                                                memory/7328-8537-0x0000015688480000-0x0000015688481000-memory.dmp

                                                                                                                                                                                memory/7328-8529-0x0000015688480000-0x0000015688481000-memory.dmp

                                                                                                                                                                                memory/7328-8538-0x0000015688480000-0x0000015688481000-memory.dmp

                                                                                                                                                                                memory/7328-8528-0x0000015688480000-0x0000015688481000-memory.dmp

                                                                                                                                                                                memory/7328-8527-0x0000015688480000-0x0000015688481000-memory.dmp

                                                                                                                                                                                memory/7328-8536-0x0000015688480000-0x0000015688481000-memory.dmp

                                                                                                                                                                                memory/7328-8535-0x0000015688480000-0x0000015688481000-memory.dmp

                                                                                                                                                                                memory/7472-6617-0x0000026E90C10000-0x0000026E90C40000-memory.dmp

                                                                                                                                                                                memory/7520-5324-0x00000185A1870000-0x00000185A18A0000-memory.dmp

                                                                                                                                                                                memory/7528-5325-0x000001E78E880000-0x000001E78E8B0000-memory.dmp

                                                                                                                                                                                memory/7692-5327-0x0000017948BB0000-0x0000017948BE0000-memory.dmp

                                                                                                                                                                                memory/7728-5322-0x0000019790150000-0x0000019790180000-memory.dmp

                                                                                                                                                                                memory/7812-5323-0x0000024F811C0000-0x0000024F811F0000-memory.dmp

                                                                                                                                                                                memory/8036-5597-0x000001AA8DBC0000-0x000001AA8DBF0000-memory.dmp

                                                                                                                                                                                memory/8096-9608-0x000001F7F3040000-0x000001F7F3070000-memory.dmp

                                                                                                                                                                                memory/8104-5675-0x000001FC68D90000-0x000001FC68DC0000-memory.dmp

                                                                                                                                                                                memory/8756-5596-0x000002229C160000-0x000002229C190000-memory.dmp

                                                                                                                                                                                memory/9132-5346-0x0000010C83760000-0x0000010C83790000-memory.dmp

                                                                                                                                                                                memory/9180-5330-0x000001FE0B0D0000-0x000001FE0B100000-memory.dmp

                                                                                                                                                                                memory/9192-5331-0x00000180FF160000-0x00000180FF190000-memory.dmp

                                                                                                                                                                                memory/9200-5336-0x000001EB63790000-0x000001EB637C0000-memory.dmp

                                                                                                                                                                                memory/9208-5326-0x000001D9BF970000-0x000001D9BF9A0000-memory.dmp