Analysis

  • max time kernel
    52s
  • max time network
    184s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260617-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    25/06/2026, 12:17

General

  • Target
    7-zip.exe
  • Size 13.8MB
  • Sample260625-pf2daabx6k
  • SHA256 1a21918b6062b1e703166f41c2124fa6402cde5d3ffabc3ea0fb178b6c433605
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Downloads MZ/PE file
  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 5 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 56 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • System Time Discovery 1 TTPs 10 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Checks SCSI registry key(s) 3 TTPs 42 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies registry class 17 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 24 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7-zip.exe
    "C:\Users\Admin\AppData\Local\Temp\7-zip.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3192
    • C:\Users\Admin\AppData\Local\Temp\is-OKRV9.tmp\7-zip.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-OKRV9.tmp\7-zip.tmp" /SL5="$6024C,13272183,791040,C:\Users\Admin\AppData\Local\Temp\7-zip.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2016
      • C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\Saccobranchusfloodwater\7-zip.exe
        "C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\Saccobranchusfloodwater\7-zip.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:3116
      • C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\antineurotoxin.dll\downloader.exe
        "C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\antineurotoxin.dll\downloader.exe" --sync --partner 937814 --distr /quiet /msicl "YABROWSER=y YAHOMEPAGE=y YAQSEARCH=y VID=158"
        3⤵
          PID:4328
          • C:\Users\Admin\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe
            "C:\Users\Admin\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe" /quiet /msicl "YABROWSER=y YAHOMEPAGE=y YAQSEARCH=y VID=158"
            4⤵
              PID:5020
            • C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\antineurotoxin.dll\downloader.exe
              C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\antineurotoxin.dll\downloader.exe --stat dwnldr/p=937814/cnt=0/dt=2/ct=1/rt=7
              4⤵
                PID:3956
            • C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\postpycnoticPokanoket.rar\OperaSetup_7hhxAWL9dT.exe
              "C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\postpycnoticPokanoket.rar\OperaSetup_7hhxAWL9dT.exe" --silent --allusers=0
              3⤵
                PID:1188
                • C:\Users\Admin\AppData\Local\Temp\7zS4A42E2E9\installer.exe
                  C:\Users\Admin\AppData\Local\Temp\7zS4A42E2E9\installer.exe --silent --allusers=0 --server-tracking-blob=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
                  4⤵
                    PID:4296
                    • C:\Users\Admin\AppData\Local\Temp\7zS4A42E2E9\installer.exe
                      C:\Users\Admin\AppData\Local\Temp\7zS4A42E2E9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff64a5e4e08,0x7ff64a5e4e14,0x7ff64a5e4e20
                      5⤵
                        PID:676
                      • C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\installer.exe
                        "C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\installer.exe" --version
                        5⤵
                          PID:2372
                        • C:\Users\Admin\AppData\Local\Temp\7zS4A42E2E9\installer.exe
                          "C:\Users\Admin\AppData\Local\Temp\7zS4A42E2E9\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=4296 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_20260625131824" --session-guid=9e83b51e-c2e2-46da-9ee1-44bebc5c5696 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=F408000000000000
                          5⤵
                            PID:3124
                            • C:\Users\Admin\AppData\Local\Temp\7zS4A42E2E9\installer.exe
                              C:\Users\Admin\AppData\Local\Temp\7zS4A42E2E9\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.73 --initial-client-data=0x2b8,0x2bc,0x2c0,0x288,0x2c4,0x7ff64a5e4e08,0x7ff64a5e4e14,0x7ff64a5e4e20
                              6⤵
                                PID:3804
                              • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe" --backend --initial-pid=4296 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=0 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241" --session-guid=9e83b51e-c2e2-46da-9ee1-44bebc5c5696 --server-tracking-blob=MTY5YTA3YzU5YTYyNDQxZGEyNDk2ZjdhN2JkMTcxOTRkMDkxNWFjZWJmYjEzNTczZmExYWVjY2EzMWQxN2EzNTp7ImNvdW50cnkiOiJSVSIsImVkaXRpb24iOiJZeCswOCIsImZhc3Rfb25ib2FyZGluZyI6e30sImh0dHBfcmVmZXJyZXIiOiJodHRwczovL2tlZXBicm93c2VyLnJ1L3ByLzlETHNiVnlhcUwvIiwiaW5zdGFsbGVyX25hbWUiOiJPcGVyYVNldHVwLmV4ZSIsInByb2R1Y3QiOnsibmFtZSI6Im9wZXJhIn0sInF1ZXJ5IjoiL29wZXJhL3N0YWJsZT91dG1fbWVkaXVtPXBiJnV0bV9zb3VyY2U9Z3B3JnV0bV9jYW1wYWlnbj05RExzYlZ5YXFMJmVkaXRpb249WXglMkIwOCIsInN5c3RlbSI6eyJwbGF0Zm9ybSI6eyJhcmNoIjoieDg2XzY0Iiwib3BzeXMiOiJXaW5kb3dzIiwib3BzeXMtdmVyc2lvbiI6IjExIiwicGFja2FnZSI6IkVYRSJ9fSwidGltZXN0YW1wIjoiMTc4MjIyMDQzNS41MTA1IiwidXNlcmFnZW50IjoiTW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzEwNS4wLjAuMCBTYWZhcmkvNTM3LjM2IiwidXRtIjp7ImNhbXBhaWduIjoiOURMc2JWeWFxTCIsIm1lZGl1bSI6InBiIiwic291cmNlIjoiZ3B3In0sInV1aWQiOiIwZDE4ODlkYi01MDJhLTQ3MmMtYmJhZC1lZDBjMjZjNzZkZGEifQ== --silent --desktopshortcut=1 --install-subfolder=132.0.5905.102
                                6⤵
                                  PID:4600
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe
                                    C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x2ac,0x2b0,0x2b4,0x288,0x2b8,0x7ff727a34e08,0x7ff727a34e14,0x7ff727a34e20
                                    7⤵
                                      PID:4232
                                    • C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241\assistant\assistant_installer.exe
                                      "C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
                                      7⤵
                                        PID:848
                                        • C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241\assistant\assistant_installer.exe
                                          "C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x250,0x254,0x258,0x22c,0x25c,0x1184040,0x118404c,0x1184058
                                          8⤵
                                            PID:5960
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                                            8⤵
                                              PID:4612
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                                                C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0x228,0x258,0xdc4040,0xdc404c,0xdc4058
                                                9⤵
                                                  PID:5252
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                                                  9⤵
                                                    PID:2864
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                      10⤵
                                                        PID:5060
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                                                          C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffd0928db70,0x7ffd0928db80,0x7ffd0928db90
                                                          11⤵
                                                            PID:4584
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                          10⤵
                                                            PID:1284
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                                                              C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffd0928db70,0x7ffd0928db80,0x7ffd0928db90
                                                              11⤵
                                                                PID:2180
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                              C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x2c0,0x2c4,0x2c8,0x290,0x2cc,0xc4c830,0xc4c83c,0xc4c848
                                                              10⤵
                                                                PID:1800
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                  11⤵
                                                                    PID:5348
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffd0928db70,0x7ffd0928db80,0x7ffd0928db90
                                                                      12⤵
                                                                        PID:1580
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                      11⤵
                                                                        PID:4880
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffd0928db70,0x7ffd0928db80,0x7ffd0928db90
                                                                          12⤵
                                                                            PID:1984
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                                                                          11⤵
                                                                            PID:5344
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffd0928db70,0x7ffd0928db80,0x7ffd0928db90
                                                                              12⤵
                                                                                PID:4788
                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241\de932af914ba00303d4a2778a383ac9c831101e2.crx"
                                                                      7⤵
                                                                        PID:5728
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                                                                          C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x290,0x294,0x298,0x28c,0x29c,0x7ffd0928db70,0x7ffd0928db80,0x7ffd0928db90
                                                                          8⤵
                                                                            PID:3140
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1628,i,9785993268360630800,10193944767208511106,262144 --field-trial-handle=1884,i,5010727833763179462,3933790565128436769,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,17175893792804087382,5531251980074215458,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1880 /prefetch:2
                                                                            8⤵
                                                                            • System Network Configuration Discovery: Internet Connection Discovery
                                                                            PID:2160
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2084,i,10110129156733313878,14126125377532242835,524288 --field-trial-handle=1884,i,5010727833763179462,3933790565128436769,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,17175893792804087382,5531251980074215458,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2220 /prefetch:11
                                                                            8⤵
                                                                            • System Network Configuration Discovery: Internet Connection Discovery
                                                                            • System Time Discovery
                                                                            PID:5696
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2360,i,7779748277084712160,3208926450833986648,524288 --field-trial-handle=1884,i,5010727833763179462,3933790565128436769,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,17175893792804087382,5531251980074215458,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2476 /prefetch:13
                                                                            8⤵
                                                                            • System Network Configuration Discovery: Internet Connection Discovery
                                                                            PID:5876
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3368,i,16062539227470375566,3442779869990125392,2097152 --field-trial-handle=1884,i,5010727833763179462,3933790565128436769,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,17175893792804087382,5531251980074215458,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3736 /prefetch:9
                                                                            8⤵
                                                                            • System Network Configuration Discovery: Internet Connection Discovery
                                                                            PID:1592
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3928,i,5974303807568354629,11996220058972616132,2097152 --field-trial-handle=1884,i,5010727833763179462,3933790565128436769,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,17175893792804087382,5531251980074215458,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3964 /prefetch:9
                                                                            8⤵
                                                                            • System Network Configuration Discovery: Internet Connection Discovery
                                                                            PID:4816
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4404,i,16883926139698708650,783959114852425611,2097152 --field-trial-handle=1884,i,5010727833763179462,3933790565128436769,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,17175893792804087382,5531251980074215458,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4412 /prefetch:9
                                                                            8⤵
                                                                            • System Network Configuration Discovery: Internet Connection Discovery
                                                                            PID:6276
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3720,i,3942545732881175731,16312602407343455330,524288 --field-trial-handle=1884,i,5010727833763179462,3933790565128436769,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,17175893792804087382,5531251980074215458,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4668 /prefetch:12
                                                                            8⤵
                                                                            • System Network Configuration Discovery: Internet Connection Discovery
                                                                            PID:6440
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3176,i,14331137309152700634,10965317448597919644,524288 --field-trial-handle=1884,i,5010727833763179462,3933790565128436769,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,17175893792804087382,5531251980074215458,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=2916 /prefetch:14
                                                                            8⤵
                                                                            • System Network Configuration Discovery: Internet Connection Discovery
                                                                            PID:6536
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5096,i,14515816844421340396,4135219259167359472,524288 --field-trial-handle=1884,i,5010727833763179462,3933790565128436769,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,17175893792804087382,5531251980074215458,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5104 /prefetch:14
                                                                            8⤵
                                                                            • System Network Configuration Discovery: Internet Connection Discovery
                                                                            PID:6780
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5300,i,1958978839779923537,3779769244242309920,2097152 --field-trial-handle=1884,i,5010727833763179462,3933790565128436769,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,17175893792804087382,5531251980074215458,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5304 /prefetch:1
                                                                            8⤵
                                                                            • System Network Configuration Discovery: Internet Connection Discovery
                                                                            PID:6916
                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4996,i,4289096165458864053,834034286692508661,524288 --field-trial-handle=1884,i,5010727833763179462,3933790565128436769,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1888,i,17175893792804087382,5531251980074215458,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5464 /prefetch:14
                                                                            8⤵
                                                                            • System Network Configuration Discovery: Internet Connection Discovery
                                                                            PID:4392
                                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                                                                          7⤵
                                                                            PID:4520
                                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                                                                              C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ffd0928db70,0x7ffd0928db80,0x7ffd0928db90
                                                                              8⤵
                                                                                PID:6296
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1696,i,1990455387232383755,11588623469360803326,262144 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1860 /prefetch:2
                                                                                8⤵
                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                PID:6816
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1964,i,16927634519200078008,7688912281727908337,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2160 /prefetch:11
                                                                                8⤵
                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                • System Time Discovery
                                                                                PID:6804
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2984,i,11882720599872104805,11211011419235957541,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3232 /prefetch:14
                                                                                8⤵
                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                PID:6928
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3008,i,10241973632402686297,15798799536718008634,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3272 /prefetch:14
                                                                                8⤵
                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                PID:6948
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3020,i,4199508677726742555,17587041321509012797,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3292 /prefetch:14
                                                                                8⤵
                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                PID:6952
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3032,i,2181353267002185680,47038881505010752,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3312 /prefetch:14
                                                                                8⤵
                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                PID:6960
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3044,i,2875384747374664175,375915699167907301,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3332 /prefetch:14
                                                                                8⤵
                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                PID:7008
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2332,i,12082654041319921947,14463241133463308015,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3184 /prefetch:13
                                                                                8⤵
                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                PID:6900
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2968,i,12326641537713668836,12808040013579347503,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3200 /prefetch:14
                                                                                8⤵
                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                PID:6924
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2996,i,8666316048896051480,9670184810706082535,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3252 /prefetch:14
                                                                                8⤵
                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                PID:6932
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3168,i,265347205589745622,13882106817696142453,2097152 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3352 /prefetch:1
                                                                                8⤵
                                                                                • System Network Configuration Discovery: Internet Connection Discovery
                                                                                PID:7028
                                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_gx_splash.exe
                                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                                                                                8⤵
                                                                                  PID:6176
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3600,i,4897761872849572186,14420824275883685962,2097152 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4264 /prefetch:9
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:6000
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4640,i,4001350611343343453,17104898536005017134,2097152 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4644 /prefetch:1
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:6180
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3716,i,8241576473812665989,10678268406910000554,2097152 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=4772 /prefetch:1
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:6516
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4780,i,17991489763282149114,3419907936729462124,2097152 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=4880 /prefetch:1
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:5936
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=3568,i,1036004774100215679,8392215630393723081,2097152 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=3552 /prefetch:9
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:4776
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3320,i,8770593683619998287,5135345541250537372,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=3248 /prefetch:13
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:2820
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2972,i,4506893634202136833,5586286744297268371,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=3792 /prefetch:11
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  • System Time Discovery
                                                                                  PID:2868
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=5884,i,8850623927205702348,17702071568068730830,2097152 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=5952 /prefetch:9
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:6440
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6048,i,7647817261853444895,14449290081043201113,2097152 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5480 /prefetch:9
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:2940
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3808,i,12665123578625135133,4188714194771311248,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=5772 /prefetch:12
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:3724
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6328,i,7496693450444155102,11062423669060946394,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6340 /prefetch:14
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:4680
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6472,i,2372644157251733443,17177884139625701347,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6484 /prefetch:14
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:2872
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6560,i,10825005758437884802,4944355999801854693,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=6568 /prefetch:14
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:6992
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6592,i,1332892582478058666,7828316772071169315,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=6576 /prefetch:14
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:6996
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6572,i,9550987945874406234,12509585917151900687,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=6884 /prefetch:14
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:7132
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=7016,i,10729485444022403285,3971410191233408326,2097152 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7076 /prefetch:1
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:1248
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7268,i,17459424332314620115,1615507860691951617,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7288 /prefetch:14
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:7856
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7292,i,3922750439906252750,5280746156782984398,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7040 /prefetch:14
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:7908
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7244,i,11406654164563249449,17108288008187518715,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=7516 /prefetch:14
                                                                                  8⤵
                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                  PID:8116
                                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                                                                  8⤵
                                                                                    PID:2008
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                      C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x29c,0x2a0,0x2a4,0x278,0x218,0x7ff775b90900,0x7ff775b9090c,0x7ff775b90918
                                                                                      9⤵
                                                                                        PID:7208
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8112,i,3554683029920614226,16038854679213891606,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8124 /prefetch:14
                                                                                      8⤵
                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                      PID:6304
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8132,i,10304694309019879825,16842837110277657870,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8272 /prefetch:14
                                                                                      8⤵
                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                      PID:1736
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8280,i,7528400681957678191,8553551672405969793,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8440 /prefetch:14
                                                                                      8⤵
                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                      PID:7100
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8580,i,17111294081262312913,15208042015980613272,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8296 /prefetch:14
                                                                                      8⤵
                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                      PID:7244
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8704,i,5836971668893995593,11708248439316411210,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8716 /prefetch:14
                                                                                      8⤵
                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                      PID:7428
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8724,i,363535980810784460,10985253784194644080,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=8860 /prefetch:14
                                                                                      8⤵
                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                      PID:7500
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --metrics-shmem-handle=8996,i,267435952676546129,16920530624427350609,2097152 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9052 /prefetch:1
                                                                                      8⤵
                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                      PID:7540
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6900,i,15435519653569001341,2853221786509827661,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=8280 /prefetch:14
                                                                                      8⤵
                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                      PID:7572
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6616,i,2448467486222786035,13804218536681622095,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=6620 /prefetch:14
                                                                                      8⤵
                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                      PID:1760
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6960,i,1723793419147354638,1390122671690063678,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=6676 /prefetch:14
                                                                                      8⤵
                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                      PID:7200
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6988,i,12363950984738303032,13043152871799508189,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=6928 /prefetch:14
                                                                                      8⤵
                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                      PID:7556
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=7300,i,9060129796968009172,15237688051014699188,2097152 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=6808 /prefetch:9
                                                                                      8⤵
                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                      PID:4864
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7516,i,4440272574178545986,414180507228216425,524288 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=4964 /prefetch:14
                                                                                      8⤵
                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                      PID:6920
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --metrics-shmem-handle=9264,i,10462458889612614031,4027754799992386888,2097152 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=9324 /prefetch:9
                                                                                      8⤵
                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                      PID:8068
                                                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-aliexpress-attributions=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:session-restore-add-partners-attributions=on --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=1612,i,16235288985132862158,11278432709713620835,2097152 --field-trial-handle=1852,i,14609236933077760755,15993295634120229122,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1864,i,8516761506917458982,11254484297879176158,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=3616 /prefetch:1
                                                                                      8⤵
                                                                                      • System Network Configuration Discovery: Internet Connection Discovery
                                                                                      PID:5360
                                                                              • C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                                                                                "C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                                                                                5⤵
                                                                                  PID:3524
                                                                                • C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241\assistant\assistant_installer.exe
                                                                                  "C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241\assistant\assistant_installer.exe" --version
                                                                                  5⤵
                                                                                    PID:4916
                                                                                    • C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241\assistant\assistant_installer.exe
                                                                                      "C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x24c,0x250,0x254,0xec,0x258,0x1184040,0x118404c,0x1184058
                                                                                      6⤵
                                                                                        PID:2528
                                                                                • C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\symmetricalsatinflower.exe\laborsomenessnonanaphthene.exe
                                                                                  "C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\symmetricalsatinflower.exe\laborsomenessnonanaphthene.exe" "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Warface.lnk" 5386
                                                                                  3⤵
                                                                                    PID:4432
                                                                                  • C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\symmetricalsatinflower.exe\laborsomenessnonanaphthene.exe
                                                                                    "C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\symmetricalsatinflower.exe\laborsomenessnonanaphthene.exe" "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\World of Tanks.lnk" 5386
                                                                                    3⤵
                                                                                      PID:6964
                                                                                    • C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\symmetricalsatinflower.exe\laborsomenessnonanaphthene.exe
                                                                                      "C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\symmetricalsatinflower.exe\laborsomenessnonanaphthene.exe" "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\World of Warships.lnk" 5386
                                                                                      3⤵
                                                                                        PID:7212
                                                                                      • C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\symmetricalsatinflower.exe\laborsomenessnonanaphthene.exe
                                                                                        "C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\symmetricalsatinflower.exe\laborsomenessnonanaphthene.exe" "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Яндекс. Поиск.lnk" 5386
                                                                                        3⤵
                                                                                          PID:7436
                                                                                    • C:\Windows\system32\sihost.exe
                                                                                      sihost.exe
                                                                                      1⤵
                                                                                      • Suspicious use of FindShellTrayWindow
                                                                                      • Suspicious use of WriteProcessMemory
                                                                                      PID:5552
                                                                                      • C:\Windows\explorer.exe
                                                                                        explorer.exe /LOADSAVEDWINDOWS
                                                                                        2⤵
                                                                                        • Boot or Logon Autostart Execution: Active Setup
                                                                                        • Enumerates connected drives
                                                                                        • Checks SCSI registry key(s)
                                                                                        • Modifies Internet Explorer settings
                                                                                        • Modifies registry class
                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                        • Suspicious use of AdjustPrivilegeToken
                                                                                        • Suspicious use of FindShellTrayWindow
                                                                                        • Suspicious use of SendNotifyMessage
                                                                                        PID:1164
                                                                                        • C:\Users\Admin\AppData\Local\Temp\{77557CB4-566D-4C16-A4D6-C153EF627C81}.exe
                                                                                          "C:\Users\Admin\AppData\Local\Temp\{77557CB4-566D-4C16-A4D6-C153EF627C81}.exe" --job-name=yBrowserDownloader-{56628AB2-F2DA-4734-9FB3-0F02EA79F9F3} --send-statistics --local-path=C:\Users\Admin\AppData\Local\Temp\{77557CB4-566D-4C16-A4D6-C153EF627C81}.exe --YABROWSER --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --silent --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=12870786-158&ui={616d5fa7-0b50-432e-8a1d-0c0bf4d72395} --use-user-default-locale
                                                                                          3⤵
                                                                                            PID:3440
                                                                                            • C:\Users\Admin\AppData\Local\Temp\ybFD0.tmp
                                                                                              "C:\Users\Admin\AppData\Local\Temp\ybFD0.tmp" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\49ddb89b-4f24-4498-920b-dfb8331268a9.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --install-start-time-no-uac=632341198 --installer-brand-id=yandex --installer-partner-id=pseudoportal-ru --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --job-name=yBrowserDownloader-{56628AB2-F2DA-4734-9FB3-0F02EA79F9F3} --local-path="C:\Users\Admin\AppData\Local\Temp\{77557CB4-566D-4C16-A4D6-C153EF627C81}.exe" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=12870786-158&ui={616d5fa7-0b50-432e-8a1d-0c0bf4d72395} --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=lite --use-user-default-locale --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\b4ea0a8d-eaa9-44e3-86a9-afab439c440c.tmp" --verbose-logging --yabrowser --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico"
                                                                                              4⤵
                                                                                                PID:7124
                                                                                                • C:\Users\Admin\AppData\Local\Temp\YB_771D5.tmp\setup.exe
                                                                                                  "C:\Users\Admin\AppData\Local\Temp\YB_771D5.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_771D5.tmp\BROWSER.PACKED.7Z" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\49ddb89b-4f24-4498-920b-dfb8331268a9.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --install-start-time-no-uac=632341198 --installer-brand-id=yandex --installer-partner-id=pseudoportal-ru --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --job-name=yBrowserDownloader-{56628AB2-F2DA-4734-9FB3-0F02EA79F9F3} --local-path="C:\Users\Admin\AppData\Local\Temp\{77557CB4-566D-4C16-A4D6-C153EF627C81}.exe" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=12870786-158&ui={616d5fa7-0b50-432e-8a1d-0c0bf4d72395} --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=lite --use-user-default-locale --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\b4ea0a8d-eaa9-44e3-86a9-afab439c440c.tmp" --verbose-logging --yabrowser --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico"
                                                                                                  5⤵
                                                                                                    PID:6328
                                                                                                    • C:\Users\Admin\AppData\Local\Temp\YB_771D5.tmp\setup.exe
                                                                                                      "C:\Users\Admin\AppData\Local\Temp\YB_771D5.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\YB_771D5.tmp\BROWSER.PACKED.7Z" --abt-config-resource-file="C:\Users\Admin\AppData\Local\Temp\abt_config_resource" --abt-update-path="C:\Users\Admin\AppData\Local\Temp\49ddb89b-4f24-4498-920b-dfb8331268a9.tmp" --brand-name=yandex --brand-package="C:\Users\Admin\AppData\Local\Temp\BrandFile" --clids-file="C:\Users\Admin\AppData\Local\Temp\clids.xml" --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --install-start-time-no-uac=632341198 --installer-brand-id=yandex --installer-partner-id=pseudoportal-ru --installerdata="C:\Users\Admin\AppData\Local\Temp\master_preferences" --job-name=yBrowserDownloader-{56628AB2-F2DA-4734-9FB3-0F02EA79F9F3} --local-path="C:\Users\Admin\AppData\Local\Temp\{77557CB4-566D-4C16-A4D6-C153EF627C81}.exe" --partner-package="C:\Users\Admin\AppData\Local\Temp\PartnerFile" --progress-window=0 --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe?clid=12870786-158&ui={616d5fa7-0b50-432e-8a1d-0c0bf4d72395} --send-statistics --shortcut-name-with-alice-for-new-users-enabled --silent --source=lite --use-user-default-locale --variations-resource-file="C:\Users\Admin\AppData\Local\Temp\variations_resource" --variations-update-path="C:\Users\Admin\AppData\Local\Temp\b4ea0a8d-eaa9-44e3-86a9-afab439c440c.tmp" --verbose-logging --yabrowser --yandex-website-icon-file="C:\Users\Admin\AppData\Local\Temp\website.ico" --verbose-logging --run-as-admin --target-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application" --child-setup-process --restart-as-admin-time=697503243
                                                                                                      6⤵
                                                                                                      • System Time Discovery
                                                                                                      PID:932
                                                                                                      • C:\Users\Admin\AppData\Local\Temp\YB_771D5.tmp\setup.exe
                                                                                                        C:\Users\Admin\AppData\Local\Temp\YB_771D5.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=932 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.5.646 --initial-client-data=0x290,0x294,0x298,0x26c,0x29c,0x7ff64580f970,0x7ff64580f97c,0x7ff64580f988
                                                                                                        7⤵
                                                                                                          PID:6436
                                                                                                        • C:\Windows\SystemTemp\sdwra_932_1528184545\service_update.exe
                                                                                                          "C:\Windows\SystemTemp\sdwra_932_1528184545\service_update.exe" --setup
                                                                                                          7⤵
                                                                                                            PID:6728
                                                                                                            • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.5.646\service_update.exe
                                                                                                              "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.5.646\service_update.exe" --install
                                                                                                              8⤵
                                                                                                                PID:4764
                                                                                                            • C:\Windows\SystemTemp\scoped_dir932_640523434\explorer.exe
                                                                                                              "C:\Windows\SystemTemp\scoped_dir932_640523434\explorer.exe" --pttw1="C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Яндекс Браузер с Алисой AI.lnk" --shortcut-name-with-alice-for-new-users-enabled
                                                                                                              7⤵
                                                                                                                PID:5744
                                                                                                                • C:\Windows\SystemTemp\scoped_dir932_640523434\explorer.exe
                                                                                                                  C:\Windows\SystemTemp\scoped_dir932_640523434\explorer.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=5744 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.5.646 --initial-client-data=0x294,0x298,0x29c,0x270,0x1f8,0x7ff6b413f970,0x7ff6b413f97c,0x7ff6b413f988
                                                                                                                  8⤵
                                                                                                                    PID:5260
                                                                                                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
                                                                                                                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Temp\clids.xml"
                                                                                                                  7⤵
                                                                                                                    PID:7760
                                                                                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\clidmgr.exe" --appid=yabrowser --vendor-xml-path="C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\source932_797158573\Browser-bin\clids_yandex_second.xml"
                                                                                                                    7⤵
                                                                                                                      PID:7384
                                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --progress-window=0 --install-start-time-no-uac=632341198
                                                                                                              3⤵
                                                                                                                PID:7712
                                                                                                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                  C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Crashpad" --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id= --annotation=main_process_pid=7712 --annotation=metrics_client_id=fc63d31a5b744665b0350689c1f28a25 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.5.646 --initial-client-data=0x154,0x158,0x15c,0x134,0x160,0x7ffd199fbbf8,0x7ffd199fbc04,0x7ffd199fbc10
                                                                                                                  4⤵
                                                                                                                    PID:7724
                                                                                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=616d5fa7-0b50-432e-8a1d-0c0bf4d72395 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --gpu-process-kind=sandboxed --metrics-shmem-handle=1936,i,9736169675418583837,17823699032221642690,262144 --field-trial-handle=2276,i,4670579640352090544,8707003582727576588,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2292,i,10869782741840844225,10623565581492860718,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2272 /prefetch:2
                                                                                                                    4⤵
                                                                                                                      PID:1336
                                                                                                                    • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                      "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=gpu-process --user-id=616d5fa7-0b50-432e-8a1d-0c0bf4d72395 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=disabled --gpu-process-kind=trampoline --metrics-shmem-handle=1992,i,15842366534706936380,4894770423428108121,262144 --field-trial-handle=2276,i,4670579640352090544,8707003582727576588,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2292,i,10869782741840844225,10623565581492860718,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2416 /prefetch:6
                                                                                                                      4⤵
                                                                                                                        PID:7348
                                                                                                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=ru --service-sandbox-type=none --user-id=616d5fa7-0b50-432e-8a1d-0c0bf4d72395 --brand-id=yandex --partner-id=pseudoportal-ru --no-pre-read-main-dll --force-high-res-timeticks=disabled --process-name="Network Service" --metrics-shmem-handle=2176,i,6295684147349305643,4461646865413457749,524288 --field-trial-handle=2276,i,4670579640352090544,8707003582727576588,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2292,i,10869782741840844225,10623565581492860718,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2436 --brver=26.4.5.646 /prefetch:11
                                                                                                                        4⤵
                                                                                                                        • System Time Discovery
                                                                                                                        PID:2480
                                                                                                                      • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                        "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=ru --service-sandbox-type=service --user-id=616d5fa7-0b50-432e-8a1d-0c0bf4d72395 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Storage Service" --metrics-shmem-handle=2612,i,9869513579275561869,6704681773126094029,524288 --field-trial-handle=2276,i,4670579640352090544,8707003582727576588,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2292,i,10869782741840844225,10623565581492860718,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=4012 --brver=26.4.5.646 /prefetch:13
                                                                                                                        4⤵
                                                                                                                          PID:6972
                                                                                                                        • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                          "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=ru --service-sandbox-type=audio --user-id=616d5fa7-0b50-432e-8a1d-0c0bf4d72395 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Audio Service" --metrics-shmem-handle=2980,i,7518434490172431741,17025050880560720212,524288 --field-trial-handle=2276,i,4670579640352090544,8707003582727576588,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2292,i,10869782741840844225,10623565581492860718,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4036 --brver=26.4.5.646 /prefetch:12
                                                                                                                          4⤵
                                                                                                                            PID:7504
                                                                                                                          • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                            "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=ru --service-sandbox-type=none --user-id=616d5fa7-0b50-432e-8a1d-0c0bf4d72395 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Video Capture" --metrics-shmem-handle=3048,i,2234840835362402193,8786751557119911487,524288 --field-trial-handle=2276,i,4670579640352090544,8707003582727576588,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2292,i,10869782741840844225,10623565581492860718,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4064 --brver=26.4.5.646 /prefetch:14
                                                                                                                            4⤵
                                                                                                                              PID:7768
                                                                                                                            • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                              "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=ru --service-sandbox-type=none --user-id=616d5fa7-0b50-432e-8a1d-0c0bf4d72395 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Импорт профилей" --metrics-shmem-handle=3868,i,14471414243976295879,4513821908275074497,524288 --field-trial-handle=2276,i,4670579640352090544,8707003582727576588,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2292,i,10869782741840844225,10623565581492860718,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4356 --brver=26.4.5.646 /prefetch:14
                                                                                                                              4⤵
                                                                                                                                PID:1276
                                                                                                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=616d5fa7-0b50-432e-8a1d-0c0bf4d72395 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --may-use-trampoline-gpu --metrics-shmem-handle=3908,i,8376142040537770104,3248298084044930483,2097152 --field-trial-handle=2276,i,4670579640352090544,8707003582727576588,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2292,i,10869782741840844225,10623565581492860718,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4404 /prefetch:1
                                                                                                                                4⤵
                                                                                                                                • System Time Discovery
                                                                                                                                PID:7876
                                                                                                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=616d5fa7-0b50-432e-8a1d-0c0bf4d72395 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --may-use-trampoline-gpu --metrics-shmem-handle=5320,i,16439731016631364361,8408834878628129222,2097152 --field-trial-handle=2276,i,4670579640352090544,8707003582727576588,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2292,i,10869782741840844225,10623565581492860718,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5348 /prefetch:1
                                                                                                                                4⤵
                                                                                                                                • System Time Discovery
                                                                                                                                PID:4680
                                                                                                                              • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=ru --service-sandbox-type=service --user-id=616d5fa7-0b50-432e-8a1d-0c0bf4d72395 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name="Data Decoder Service" --metrics-shmem-handle=5548,i,17619560563609273742,727830535579683887,524288 --field-trial-handle=2276,i,4670579640352090544,8707003582727576588,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2292,i,10869782741840844225,10623565581492860718,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5568 --brver=26.4.5.646 /prefetch:14
                                                                                                                                4⤵
                                                                                                                                  PID:7016
                                                                                                                                • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                  "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=utility --utility-sub-type=uwp_cookie_provider.mojom.UwpCookieProvider --lang=ru --service-sandbox-type=utility --user-id=616d5fa7-0b50-432e-8a1d-0c0bf4d72395 --brand-id=yandex --partner-id=pseudoportal-ru --force-high-res-timeticks=disabled --process-name=uwp_cookie_provider.mojom.UwpCookieProvider --metrics-shmem-handle=5872,i,17855002523144753356,14418778053856569184,524288 --field-trial-handle=2276,i,4670579640352090544,8707003582727576588,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2292,i,10869782741840844225,10623565581492860718,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5884 --brver=26.4.5.646 /prefetch:14
                                                                                                                                  4⤵
                                                                                                                                    PID:7252
                                                                                                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=616d5fa7-0b50-432e-8a1d-0c0bf4d72395 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --ya-custo-process --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4552,i,1761382339029534656,15343140790930749027,2097152 --field-trial-handle=2276,i,4670579640352090544,8707003582727576588,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2292,i,10869782741840844225,10623565581492860718,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4364 /prefetch:1
                                                                                                                                    4⤵
                                                                                                                                    • System Time Discovery
                                                                                                                                    PID:8040
                                                                                                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=616d5fa7-0b50-432e-8a1d-0c0bf4d72395 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --ya-custo-process --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=4028,i,8367972626529408714,12067870970970271827,2097152 --field-trial-handle=2276,i,4670579640352090544,8707003582727576588,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2292,i,10869782741840844225,10623565581492860718,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=6092 /prefetch:1
                                                                                                                                    4⤵
                                                                                                                                    • System Time Discovery
                                                                                                                                    PID:6360
                                                                                                                                  • C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
                                                                                                                                    "C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\browser.exe" --type=renderer --user-id=616d5fa7-0b50-432e-8a1d-0c0bf4d72395 --brand-id=yandex --partner-id=pseudoportal-ru --help-url=https://api.browser.yandex.ru/redirect/help/ --user-agent-info --web-ntp-url-for-renderer=chrome://ntp/ --translate-security-origin=https://browser.translate.yandex.net/ --enable-instaserp --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=ru --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6244,i,17850597964353761510,18090434899663943457,2097152 --field-trial-handle=2276,i,4670579640352090544,8707003582727576588,262144 --enable-features=ShortcutNameWithAlice --variations-seed-version --pseudonymization-salt-handle=2292,i,10869782741840844225,10623565581492860718,4 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=6248 /prefetch:1
                                                                                                                                    4⤵
                                                                                                                                    • System Time Discovery
                                                                                                                                    PID:7300
                                                                                                                            • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                              "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                              1⤵
                                                                                                                              • Modifies registry class
                                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                                              PID:3644
                                                                                                                            • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                              "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                              1⤵
                                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                                              PID:2248
                                                                                                                            • C:\Windows\system32\msiexec.exe
                                                                                                                              C:\Windows\system32\msiexec.exe /V
                                                                                                                              1⤵
                                                                                                                                PID:2560
                                                                                                                                • C:\Windows\syswow64\MsiExec.exe
                                                                                                                                  C:\Windows\syswow64\MsiExec.exe -Embedding 335352229B48447164C7EB3AFB914D5A
                                                                                                                                  2⤵
                                                                                                                                    PID:4648
                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\985DF177-B7CB-4422-B426-285CF64E9DAF\lite_installer.exe
                                                                                                                                      "C:\Users\Admin\AppData\Local\Temp\985DF177-B7CB-4422-B426-285CF64E9DAF\lite_installer.exe" --use-user-default-locale --silent --remote-url=http://downloader.yandex.net/downloadable_soft/browser/pseudoportal-ru/Yandex.exe --cumtom-welcome-page=https://browser.yandex.ru/promo/welcome_com/5/ --YABROWSER
                                                                                                                                      3⤵
                                                                                                                                        PID:3304
                                                                                                                                      • C:\Users\Admin\AppData\Local\Temp\F645110C-49B1-469F-9124-CBF49C839F9C\seederexe.exe
                                                                                                                                        "C:\Users\Admin\AppData\Local\Temp\F645110C-49B1-469F-9124-CBF49C839F9C\seederexe.exe" "--yqs=y" "--yhp=y" "--ilight=" "--oem=" "--nopin=n" "--pin_custom=n" "--pin_desktop=n" "--pin_taskbar=y" "--locale=us" "--browser=y" "--browser_default=" "--loglevel=trace" "--ess=" "--clids=C:\Users\Admin\AppData\Local\Temp\clids-yasearch.xml" "--sender=C:\Users\Admin\AppData\Local\Temp\1DBFFB7C-415F-416D-8181-BDEEB6FA40F4\sender.exe" "--is_elevated=yes" "--ui_level=2" "--good_token=x" "--no_opera=n"
                                                                                                                                        3⤵
                                                                                                                                          PID:2900
                                                                                                                                          • C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe
                                                                                                                                            C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe --silent --pin-taskbar=y --pin-desktop=n /icon-path="C:\Users\Admin\AppData\Local\MICROS~1\INTERN~1\Services\WWWYAR~1.ICO"
                                                                                                                                            4⤵
                                                                                                                                              PID:1964
                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\pin\explorer.exe
                                                                                                                                                C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe --silent --pin-taskbar=y --pin-desktop=n /icon-path="C:\Users\Admin\AppData\Local\MICROS~1\INTERN~1\Services\WWWYAR~1.ICO" /pin-path="C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.lnk" --is-pinning
                                                                                                                                                5⤵
                                                                                                                                                  PID:5212
                                                                                                                                              • C:\Users\Admin\AppData\Local\Temp\1DBFFB7C-415F-416D-8181-BDEEB6FA40F4\sender.exe
                                                                                                                                                C:\Users\Admin\AppData\Local\Temp\1DBFFB7C-415F-416D-8181-BDEEB6FA40F4\sender.exe --send "/status.xml?clid=12870804-158&uuid=616d5fa7-0b50-432e-8a1d-0c0bf4d72395&vnt=Windows 11x64&file-no=8%0A10%0A11%0A12%0A13%0A15%0A17%0A18%0A20%0A21%0A22%0A25%0A36%0A40%0A42%0A45%0A57%0A61%0A89%0A102%0A103%0A111%0A123%0A124%0A125%0A"
                                                                                                                                                4⤵
                                                                                                                                                  PID:4520
                                                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                                                            C:\Windows\system32\svchost.exe -k GPSvcGroup
                                                                                                                                            1⤵
                                                                                                                                              PID:5064
                                                                                                                                            • C:\Windows\system32\wbem\unsecapp.exe
                                                                                                                                              C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                                                                                              1⤵
                                                                                                                                                PID:3384
                                                                                                                                              • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.5.646\service_update.exe
                                                                                                                                                "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.5.646\service_update.exe" --run-as-service
                                                                                                                                                1⤵
                                                                                                                                                  PID:6636
                                                                                                                                                  • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.5.646\service_update.exe
                                                                                                                                                    "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.5.646\service_update.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://crash-reports.browser.yandex.net/submit --annotation=machine_id=488DCA4C15F9A1D330AD312B391A804E --annotation=main_process_pid=6636 --annotation=plat=Win64 --annotation=prod=Yandex --annotation=session_logout=False --annotation=ver=26.4.5.646 --initial-client-data=0x23c,0x240,0x244,0x21c,0x248,0x7ff71e48f250,0x7ff71e48f25c,0x7ff71e48f268
                                                                                                                                                    2⤵
                                                                                                                                                      PID:5364
                                                                                                                                                    • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.5.646\service_update.exe
                                                                                                                                                      "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.5.646\service_update.exe" --update-scheduler
                                                                                                                                                      2⤵
                                                                                                                                                        PID:6588
                                                                                                                                                        • C:\Program Files (x86)\Yandex\YandexBrowser\26.4.5.646\service_update.exe
                                                                                                                                                          "C:\Program Files (x86)\Yandex\YandexBrowser\26.4.5.646\service_update.exe" --update-background-scheduler
                                                                                                                                                          3⤵
                                                                                                                                                            PID:3148
                                                                                                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                                                                                                        1⤵
                                                                                                                                                          PID:1040
                                                                                                                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                                                                                                            C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff775b90900,0x7ff775b9090c,0x7ff775b90918
                                                                                                                                                            2⤵
                                                                                                                                                              PID:7588
                                                                                                                                                            • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                                                                                                                              "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                                                                                                                              2⤵
                                                                                                                                                                PID:6784
                                                                                                                                                            • C:\Windows\system32\svchost.exe
                                                                                                                                                              C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                              1⤵
                                                                                                                                                                PID:5496
                                                                                                                                                              • C:\Windows\system32\svchost.exe
                                                                                                                                                                C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
                                                                                                                                                                1⤵
                                                                                                                                                                  PID:6248

                                                                                                                                                                Network

                                                                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                                                                      Replay Monitor

                                                                                                                                                                      Loading Replay Monitor...

                                                                                                                                                                      Downloads

                                                                                                                                                                      e59cdf8.rbs

                                                                                                                                                                      • Path C:\Config.Msi\e59cdf8.rbs
                                                                                                                                                                      • Size 912B
                                                                                                                                                                      • SHA256 b841a26fff0f1abfe948706e39c6d5e63142cfed3bed64f87689239ee410744d
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      357F04AD41BCF5FE18FCB69F60C6680F_F9EC4AEA9882736924865A4CF427D722

                                                                                                                                                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\357F04AD41BCF5FE18FCB69F60C6680F_F9EC4AEA9882736924865A4CF427D722
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 4ff43aebfb8eb4b0e5e47301f4a11a2ab07c7e4c4bf1903603de8211c3d80e59
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E

                                                                                                                                                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 6352ce91c69ca45c6fa24d663db5c0a2d5ce9a98bdd1432a29b10b8cd9c93c45
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      357F04AD41BCF5FE18FCB69F60C6680F_F9EC4AEA9882736924865A4CF427D722

                                                                                                                                                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\357F04AD41BCF5FE18FCB69F60C6680F_F9EC4AEA9882736924865A4CF427D722
                                                                                                                                                                      • Size 536B
                                                                                                                                                                      • SHA256 ac488bc0aedf59a20a10610983af14a302baac55de7343bfb22aa2c5ea01a45c
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E

                                                                                                                                                                      • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9CB4373A4252DE8D2212929836304EC5_1AB74AA2E3A56E1B8AD8D3FEC287554E
                                                                                                                                                                      • Size 536B
                                                                                                                                                                      • SHA256 ecbe5c345d92dddc810bd81ec596ddeb7264c1835283c7cfda0e918fb480670c
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      www.ya.ru.ico

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\Services\www.ya.ru.ico
                                                                                                                                                                      • Size 5KB
                                                                                                                                                                      • SHA256 6bb91f1d74389b18bce6e71772e4c5573648c1a4823338193f700afdf8216be5
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      ee5dd21d3dd211ccddb811fbb6c19118

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\cmxtu0cq.default-release\thumbnails\ee5dd21d3dd211ccddb811fbb6c19118
                                                                                                                                                                      • Size 15KB
                                                                                                                                                                      • SHA256 2435c0376fca765b21d43e897f4baa52daa0958a7015d04103488c606c99d1d3
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      data_2

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_2
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                      data_3

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_3
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                      f_000001

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                                                                                                                                                      • Size 162KB
                                                                                                                                                                      • SHA256 c3aa1d8114581a8bf1178d67af0094708f0faffb7ee03297aa1c328242a70064
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      prep_Activatable Class_Hermes_perf.cache

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                                                                                                                                      • Size 607B
                                                                                                                                                                      • SHA256 be6b74e52e5eef1f1c27c0976bf3bf1bfa99958c00bbef2898a602f691be6dae
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      installer_prefs.json

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 18593f93aa12700e398a1e9de63adc2285b45a93bf40ed47b7401344ff248595
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      Opera Browser.lnk

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241\Opera Browser.lnk
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 8c1ca8555f053b0ca2de00242b3a6fc4995d4d92bc5702a0579c5b13cc110b40
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      additional_file0.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241\additional_file0.tmp
                                                                                                                                                                      • Size 2.8MB
                                                                                                                                                                      • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      installer_prefs_include.json

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241\installer_prefs_include.json
                                                                                                                                                                      • Size 267B
                                                                                                                                                                      • SHA256 2f9eed84d2be1d2e1d151f19e454be4b61facd1fe3024c093d3952b7efd2236c
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      installer_prefs_include.json

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241\installer_prefs_include.json
                                                                                                                                                                      • Size 282B
                                                                                                                                                                      • SHA256 6bca37d3fe727ac6247eb701ce579a5acb5d18a26a5f9116877b62d9d66c1890
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      installer_prefs_include.json

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\.opera\fd26d7f2-4f77-4625-bc59-497ca824fab7 Opera Installer Temp\opera_package_202606251318241\installer_prefs_include.json
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 ef8a98d795cf60048733ac7ccd03e695e806c306ad4dbd2f013a1fcb5959f9d7
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      sender.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\1DBFFB7C-415F-416D-8181-BDEEB6FA40F4\sender.exe
                                                                                                                                                                      • Size 258KB
                                                                                                                                                                      • SHA256 38483f6f7ac7ba9ebc7294448575673142a4cb2e8c6500987c0cf7de59a6a082
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      YandexPackSetup.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\7F4987FB1A6E43d69E3E94B29EB75926\YandexPackSetup.exe
                                                                                                                                                                      • Size 10.1MB
                                                                                                                                                                      • SHA256 b89a64c75711576842de5397849ecdbad7f5862bc8395c8c3f4bf336caac8b9e
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      installer.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\7zS4A42E2E9\installer.exe
                                                                                                                                                                      • Size 8.3MB
                                                                                                                                                                      • SHA256 dc3d10cc8484cd68565230d8ee80dbae3d55a8731e77ed698dd20e4b295209da
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      lite_installer.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\985DF177-B7CB-4422-B426-285CF64E9DAF\lite_installer.exe
                                                                                                                                                                      • Size 418KB
                                                                                                                                                                      • SHA256 d5afe2f333908aa0e84b59851f8208a9dfc0838d13d59b3d76f6f6c9245f6afb
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      seederexe.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\F645110C-49B1-469F-9124-CBF49C839F9C\seederexe.exe
                                                                                                                                                                      • Size 8.6MB
                                                                                                                                                                      • SHA256 71be9c579ff6385abc1a7c4157d73f126375ea722d6174d113077506a8936550
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      WrpYGF74DrEm.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\WrpYGF74DrEm.ini
                                                                                                                                                                      • Size 55B
                                                                                                                                                                      • SHA256 31df989fec4e35354ced3415ea8a2c4f4a89d9121730467fde5af2f393df315f
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      YandexSearch00000.log

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\YandexSearch00000.log
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 c327f6964580a694ef8a4f2afa82690ff938c0d2bd2b82619c6fffda9cbb46c2
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      clids-yasearch.xml

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\clids-yasearch.xml
                                                                                                                                                                      • Size 729B
                                                                                                                                                                      • SHA256 7b5e93052c7d399976b55e1ed0aa4d381dae559168cfd56080bc158a0f527e96
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      CallbackCtrl.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\Pandean.dll\CallbackCtrl.dll
                                                                                                                                                                      • Size 4KB
                                                                                                                                                                      • SHA256 68f42a7823ed7ee88a5c59020ac52d4bbcadf1036611e96e470d986c8faa172d
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      7-zip.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\Saccobranchusfloodwater\7-zip.exe
                                                                                                                                                                      • Size 1.4MB
                                                                                                                                                                      • SHA256 0f5d4dbbe5e55b7aa31b91e5925ed901fdf46a367491d81381846f05ad54c45e
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Logo.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\antineurotoxin.dll\Logo.png
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 625112b42752867093ef31a9d556b3a3b1954e67b4c8e3ee2caf8c0bb92013a1
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      downloader.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\antineurotoxin.dll\downloader.exe
                                                                                                                                                                      • Size 203KB
                                                                                                                                                                      • SHA256 c60c3a7d20b575fdeeb723e12a11c2602e73329dc413fc6d88f72e6f87e38b49
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      nutrient.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\ashrams\nutrient.dll
                                                                                                                                                                      • Size 16KB
                                                                                                                                                                      • SHA256 3305e8a5baac420f320bac168a4bd3ea627838389cc9431eaa2824e2487917ed
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      GroupLogo.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\courtroom.ico\GroupLogo.png
                                                                                                                                                                      • Size 48KB
                                                                                                                                                                      • SHA256 1a337bd09186900ce1e65627a2d5cc96d45198227d2925a56e0d8036879b1f90
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      idp.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\fees.bin\idp.dll
                                                                                                                                                                      • Size 232KB
                                                                                                                                                                      • SHA256 54e7e0ad32a22b775131a6288f083ed3286a9a436941377fc20f85dd9ad983ed
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      is-KPHSH.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\is-KPHSH.ini
                                                                                                                                                                      • Size 7KB
                                                                                                                                                                      • SHA256 e51fb1eb7ac4ae4e77e3ef4397c4e9c1a07b5bf9281835ba5da18c91bae2f04c
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      botva2.dll

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\pandareproval.msi\botva2.dll
                                                                                                                                                                      • Size 41KB
                                                                                                                                                                      • SHA256 da7d0368712ee419952eb2640a65a7f24e39fb7872442ed4d2ee847ec4cfde77
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Coixtruncal.zip.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\Coixtruncal.zip.ini
                                                                                                                                                                      • Size 5KB
                                                                                                                                                                      • SHA256 d0cd491eedc010bc20a1ab58a1c2a2da809878de388303ba9e4652396c3a9dcd
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      antineurotoxin.dll.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\antineurotoxin.dll.ini
                                                                                                                                                                      • Size 13KB
                                                                                                                                                                      • SHA256 d2d3e8b41580cad6dd26847968856be98e531c6c7b9306aa3bd3333c82c9a635
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      biordinalinweaved.zip.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\biordinalinweaved.zip.ini
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 09bd4353af69cf157a95703866260255133ea3b99c52c7ac6195458067ec2d9e
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      confutes.xml.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\confutes.xml.ini
                                                                                                                                                                      • Size 4KB
                                                                                                                                                                      • SHA256 6db8811d7e17ef2da28e8d937d36483b05abac25ecc2aa5612a902cc84c76886
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      courtroom.ico.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\courtroom.ico.ini
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 94a70cb82a1a07005ee705c98288c9c66335600490ce951f3e370d15f9ad1ec6
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      cubitopalmarsilversides.msi.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\cubitopalmarsilversides.msi.ini
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 aac2f67d7473d39aa6150c6f0adef1a0c84576296c28b89833c04fda11915856
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      dissimilaritytenontomyotomy.jpg.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\dissimilaritytenontomyotomy.jpg.ini
                                                                                                                                                                      • Size 5KB
                                                                                                                                                                      • SHA256 35364d9fc3033efce92c786a672eceab1d458c6dc8fdc232e22a55c2d0ca02fa
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      ecstatical.zip.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\ecstatical.zip.ini
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 f916c757595055f7c89f736d5c19ead1bbc7f19afb10c47905ed1606fa119125
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      entocondyloid.bin.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\entocondyloid.bin.ini
                                                                                                                                                                      • Size 6KB
                                                                                                                                                                      • SHA256 3d4258ad219b6d3095f5881a5cf31b9b7d81a17f5203e9f3ba318c811b6b9fd8
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      flounderinglyalleviators.dll.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\flounderinglyalleviators.dll.ini
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 3ebecaa93cb218c1512c7fefef87efbd4ae12d7d3d932c4ad68821b10c4499a2
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      gardenlystero.bin.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\gardenlystero.bin.ini
                                                                                                                                                                      • Size 13KB
                                                                                                                                                                      • SHA256 779c0e998b7bc60117c9df4701cdd743be917f0b1681480295fa7194a7cf2f04
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      gillbird.bin.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\gillbird.bin.ini
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 481bca5f98db619bd333cd03ca71dd86ae9fc3deffd09362e9121cc6604c4aa6
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      hellanodic.zip.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\hellanodic.zip.ini
                                                                                                                                                                      • Size 6KB
                                                                                                                                                                      • SHA256 1ddbd2e112ef9d48e0dc9be6145d4c11c134a36869dd841c2c5f855c5fafbe11
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      isoclasite.bin.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\isoclasite.bin.ini
                                                                                                                                                                      • Size 6KB
                                                                                                                                                                      • SHA256 4db28f85ee3db16e05656c02350e374ddc3965e77327f2c830a4ce6a39d8034a
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      kuchensomnicredulity.rar.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\kuchensomnicredulity.rar.ini
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 6c1465d3b5e1b98554a955ed042388dafec558cad6ea45a304eecb562440f955
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      leadhillite.msi.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\leadhillite.msi.ini
                                                                                                                                                                      • Size 5KB
                                                                                                                                                                      • SHA256 d9efbca64a006fa012c376ff5f70691f09698c92bf9a994c8307d488fb71b34f
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      multiovulate.dll.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\multiovulate.dll.ini
                                                                                                                                                                      • Size 4KB
                                                                                                                                                                      • SHA256 d9a8fd2cb48c6371b2f60816dc872be5acd3d3f3dbd0ea6c4ec2d047fb8a9d3f
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      octospore.bin.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\octospore.bin.ini
                                                                                                                                                                      • Size 4KB
                                                                                                                                                                      • SHA256 fda8ef82c476e087269386cf7e510c1a6f515098e086527d92ce23a7cc00e10c
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      optometrist.ico.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\optometrist.ico.ini
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 336738111add1818431e3da01a62967d82648ed8f3beedd6e3db078cff00c2e9
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      phosgeniteunpacifiable.zip.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\phosgeniteunpacifiable.zip.ini
                                                                                                                                                                      • Size 7KB
                                                                                                                                                                      • SHA256 34d9992d88ec819ea18c4efc8fb31e52480e5692855c3b277e3765b9b8e1f3ef
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      polymorphoussewed.exe.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\polymorphoussewed.exe.ini
                                                                                                                                                                      • Size 6KB
                                                                                                                                                                      • SHA256 9db79a5ff05c0d060ec4bada6fcd0865252cb35f22e38711178539b047d76658
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      possibilitysmelled.dll.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\possibilitysmelled.dll.ini
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 fba1db022e55f6c1260958fc7195b5209091ee249e65dc710e26d21671394689
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      postpycnoticPokanoket.rar.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\postpycnoticPokanoket.rar.ini
                                                                                                                                                                      • Size 6KB
                                                                                                                                                                      • SHA256 e8d4e808d495f390dfb9b692a0032240d4131995e63962756729a21cca3479ce
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      predistrict.bin.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\predistrict.bin.ini
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 5b08cc0a1565043d11c372a4546bcf6019ae8d34eb62ce3f0f16b77c8c85c5fc
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      quinuclidinetransacted.bmp.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\quinuclidinetransacted.bmp.ini
                                                                                                                                                                      • Size 6KB
                                                                                                                                                                      • SHA256 7b19fb624ef330739919d604494f9e45c44e0d61d554963dcb5dbfefab523f09
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      rabbiting.bmp.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\rabbiting.bmp.ini
                                                                                                                                                                      • Size 5KB
                                                                                                                                                                      • SHA256 e6edd425add56a2146ae9aa9a78d0aec03104dec3aa1e958e16c92191000d869
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      sciotheric.dll.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\sciotheric.dll.ini
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 8b079f41324b28f560ad2b2b71cd15cc3f685a1bdd6ffd0d8a26675b3ba680f3
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      sobbinglyrichest.jpg.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\sobbinglyrichest.jpg.ini
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 a3d81f64a7b6a77dc0b7ec1a50ea5645a8017311f40155f948d09bfcac4d2d9b
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      spermatitis.bin.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\spermatitis.bin.ini
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 e45ef58a2c36e0c549a54c02067c04bce064bc00577be65fb56454f1bff78a20
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      talapoins.zip.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\talapoins.zip.ini
                                                                                                                                                                      • Size 7KB
                                                                                                                                                                      • SHA256 d8dd524f582b84f32aa012f5e3e7307bca0b2ff399aa5092a4414afc2fb75083
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      vomitwort.bin.ini

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\perivaginal.dll\vomitwort.bin.ini
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 5f81f9053de283c6de5155b74bf3786181c13709ca94ec28eacd5841954ab05f
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Logo.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\postpycnoticPokanoket.rar\Logo.png
                                                                                                                                                                      • Size 15KB
                                                                                                                                                                      • SHA256 06d80a2fdaa5d85ab8a15dbc00147f8294bee5b2076969be7cb0e94a227c20be
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      OperaSetup_7hhxAWL9dT.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\postpycnoticPokanoket.rar\OperaSetup_7hhxAWL9dT.exe
                                                                                                                                                                      • Size 3.1MB
                                                                                                                                                                      • SHA256 930918f6a1d3b39cc19281f9e9b7ddcdd38970e1f74b0e80154104f7b4f2c036
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      laborsomenessnonanaphthene.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-7SUG2.tmp\symmetricalsatinflower.exe\laborsomenessnonanaphthene.exe
                                                                                                                                                                      • Size 19KB
                                                                                                                                                                      • SHA256 07d6c3a19a8e3e243e9545a41dd30a9ee1e9ad79cdd6d446c229d689e5ab574a
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      7-zip.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\is-OKRV9.tmp\7-zip.tmp
                                                                                                                                                                      • Size 3.0MB
                                                                                                                                                                      • SHA256 4db53ae8c4f33569277fe215bc149066dc59e02b579bb45590258c1ded630bc8
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      lite_installer.log

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\lite_installer.log
                                                                                                                                                                      • Size 10KB
                                                                                                                                                                      • SHA256 3843578acde017610af1e990bcbbf37b459c3ba9c1fc3d3b18ecedef0a608785
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      master_preferences

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\master_preferences
                                                                                                                                                                      • Size 542B
                                                                                                                                                                      • SHA256 0325fd8be2634b3b8fd40c2d7900b7816bc4cc456ed1b708d9b1f0ca1af4853b
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      Icon_Light_Neutral.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4520_1324116548\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      favicon_opera_one.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5728_1966037151\CRX_INSTALL\favicon_opera_one.png
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      vendor00000.xml

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\vendor00000.xml
                                                                                                                                                                      • Size 528B
                                                                                                                                                                      • SHA256 3858ef68701c4b70381e2f449196005cae9b884c379cfb1181c189a3a62d4d89
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      YandexSearch.msi

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\{5B964E0E-B9A3-4276-9ED9-4D5A5720747A}\YandexSearch.msi
                                                                                                                                                                      • Size 9.8MB
                                                                                                                                                                      • SHA256 3fa4722ed702608d9680d17576a19c9fc0d02218fc21e823412d8269a34a56e2
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      {77557CB4-566D-4C16-A4D6-C153EF627C81}.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\{77557CB4-566D-4C16-A4D6-C153EF627C81}.exe
                                                                                                                                                                      • Size 11.6MB
                                                                                                                                                                      • SHA256 f91c2f61339bf887d63c7b105ab70d9c6a2130ac69f1f944088ede665d0e31d1
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Yandex.exe

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.exe
                                                                                                                                                                      • Size 395KB
                                                                                                                                                                      • SHA256 50d73db5c8098789f182bc6fff3d9308c3ad7957286389b5fa3c1438210f3d76
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Yandex.lnk

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YaPin\Yandex.lnk
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 4a691d01110f18da269c72196e001847fd7e5a9294afd96f0fc481d390af5b02
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      install_state.json

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Application\install_state.json
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 f14ff904238911a9c6d1d0f7586fe199d7356449c9954b128423fdf6f680c798
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      brand_config

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.5.646\brand_config
                                                                                                                                                                      • Size 6KB
                                                                                                                                                                      • SHA256 5c28616f4a6a1f713acd65b6ccd0dc6c4a9008f8f23f82ea634c563e70d56ba2
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      partner_config

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.5.646\partner_config
                                                                                                                                                                      • Size 341B
                                                                                                                                                                      • SHA256 82e288090168abe15419015317fd38f56c1136e7481f66656d84e0a2d861d4d6
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      all_zip

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.5.646\resources\configs\all_zip
                                                                                                                                                                      • Size 1.3MB
                                                                                                                                                                      • SHA256 7388e711cb3139dbb538d7fd930af3160e91b09a724e40db0d8668fc289349a0
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      light_static.jpg

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.5.646\resources\wallpapers\light.title\light_static.jpg
                                                                                                                                                                      • Size 674KB
                                                                                                                                                                      • SHA256 16df6e2f9e057ce2e90981f8dfc026d5deeda9266147256fbb787eb27e2f3ee1
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      sea_preview.jpg

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.5.646\resources\wallpapers\sea_preview.jpg
                                                                                                                                                                      • Size 59KB
                                                                                                                                                                      • SHA256 f60c331f1336b891a44aeff7cc3429c5c6014007028ad81cca53441c5c6b293e
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      sea_static.jpg

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\Temp\BrandPackageTemp\26.4.5.646\resources\wallpapers\sea_static.jpg
                                                                                                                                                                      • Size 300KB
                                                                                                                                                                      • SHA256 1605169330d8052d726500a2605da63b30613ac743a7fbfb04e503a4056c4e8a
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      snapshot-new.baf

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Cache\No_Vary_Search\snapshot-new.baf
                                                                                                                                                                      • Size 20B
                                                                                                                                                                      • SHA256 0c2dd377ed0cc66161e9db8f89f7d8bcb3ad8c06c4a054bdcba214ab05f58c9a
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      index

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Code Cache\js\index
                                                                                                                                                                      • Size 24B
                                                                                                                                                                      • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      Preferences

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                                                                                                                                                      • Size 13KB
                                                                                                                                                                      • SHA256 09655cf38c05eb6903d499157381426bb3b8fff4cbfc9dfc9febfb96145c6f16
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Preferences

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 63f9b79c8c66e597759a5c09fe0a15a088c6749ec682f92f728d3fdf50c3113f
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Preferences~RFe5b7a5d.TMP

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Preferences~RFe5b7a5d.TMP
                                                                                                                                                                      • Size 5KB
                                                                                                                                                                      • SHA256 9cc083fed8d5bf338b3f3932f15f27d3363d818307edcb4568d9d72d2cac2e41
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Secure Preferences

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences
                                                                                                                                                                      • Size 15KB
                                                                                                                                                                      • SHA256 523cfcd90c74088df81bc60b60ca7aaa8e29df811ddaddc5b896ab31dd64e6c1
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Secure Preferences~RFe5b7b18.TMP

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Secure Preferences~RFe5b7b18.TMP
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 2ec4e13e2a1d1391153bf1761f2a05b3b92e3811e57aaea57b6723896d42faf6
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      128.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir7712_602182070\Trusted Icons\Icons\128.png
                                                                                                                                                                      • Size 6KB
                                                                                                                                                                      • SHA256 6f6240bda239efc7969736dcb36212b55e0c026b6e191069a59b0319a871902e
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      256.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir7712_602182070\Trusted Icons\Icons\256.png
                                                                                                                                                                      • Size 5KB
                                                                                                                                                                      • SHA256 7e56c6de79baecc7d164ee5dcc98f9894b56222ead27776096679fe09a7ab1bf
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      64.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir7712_602182070\Trusted Icons\Icons\64.png
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 9c844d058a7125bb5e87b880dd6d73ad91473498d2840e109c8d01aca1d5905c
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      96.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Default\Web Applications\Temp\scoped_dir7712_602182070\Trusted Icons\Icons\96.png
                                                                                                                                                                      • Size 5KB
                                                                                                                                                                      • SHA256 feba94135d0ae26db2694c294c124c30b5f7a385b6a64441d4ecadebe680ac93
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Local State

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Local\Yandex\YandexBrowser\User Data\Local State
                                                                                                                                                                      • Size 209KB
                                                                                                                                                                      • SHA256 98837f08cce2828e4774267bc6fccaffc8f9fab25ab8996f7d13ac5cb8476b01
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Яндекс.website

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Яндекс.website
                                                                                                                                                                      • Size 516B
                                                                                                                                                                      • SHA256 c93c8a52b2e9ad96dfc43ce9b798532a39ea2d037b6427fdc239632bacba6a26
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      places.sqlite

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\91xmbxw1.Admin\places.sqlite
                                                                                                                                                                      • Size 68KB
                                                                                                                                                                      • SHA256 b6d278384a3684409a2a86f03e4f52869818ce7dd8b5779876960353f7d35dc1
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Bookmarks

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Bookmarks
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 2b167248e8136c4d45c2c46e2bff6fb5e5137dd4dfdccde998599be2df2e9335
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      settings.dat

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                                                                                                                      • Size 40B
                                                                                                                                                                      • SHA256 8643e6b6bb39b8dcd42a01a5a08488b47ea9efd3093e505ebca227fa9ee21e7a
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      32c83556-4b8e-4ac8-9a6c-694a8fa378c3.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\32c83556-4b8e-4ac8-9a6c-694a8fa378c3.tmp
                                                                                                                                                                      • Size 171B
                                                                                                                                                                      • SHA256 fad297ab8bbdb6dfc1ae659284bfd1ebf0d1d7ba8073b518eda4d3112ef8c637
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      568df676-ff65-4561-9aab-16a117379bbf.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\568df676-ff65-4561-9aab-16a117379bbf.tmp
                                                                                                                                                                      • Size 21KB
                                                                                                                                                                      • SHA256 46c9ea7b76ea637aaefb406fd85dd56dfaa1fc86c40c9e8f6972f6f9901c00fa
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      65648878-07a3-496f-b436-6233dd3da109.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\65648878-07a3-496f-b436-6233dd3da109.tmp
                                                                                                                                                                      • Size 203B
                                                                                                                                                                      • SHA256 dc66cceca2408b793251d2c879226e12973223b42f1ad7cd2f2c299081f02b9b
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      892f746e-5ae6-42ca-a25c-e5e3daa3cd42.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\892f746e-5ae6-42ca-a25c-e5e3daa3cd42.tmp
                                                                                                                                                                      • Size 6B
                                                                                                                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      Bookmarks

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                                                                                                                      • Size 6KB
                                                                                                                                                                      • SHA256 4932fe4bb1a16b8ebea8c2d57d00a990e6c41b3adf77acae80df3d553fa6240d
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Bookmarks

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                                                                                                                      • Size 24KB
                                                                                                                                                                      • SHA256 a8bc09baa8ae779f0595745e9a45984b4c681c3df97eb5dfb96a2c50086883e4
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      BookmarksExtras

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                                                                                                                      • Size 294KB
                                                                                                                                                                      • SHA256 7e6c0073352ed344882f9561ab8e681b8b12cd9aad501ffc645da3eee846eccc
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      63d194ff-0746-4205-9b04-92d4fc3955a0.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\63d194ff-0746-4205-9b04-92d4fc3955a0.tmp
                                                                                                                                                                      • Size 48B
                                                                                                                                                                      • SHA256 fa0f953383c6e4a5f54f6fe679ac6030180d788c6e6e93a375f50800c58affd2
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      the-real-index

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                                      • Size 264B
                                                                                                                                                                      • SHA256 507a7bc9efa26e6b85bb162dc1fb29d84eea250ff5b95efc6369e3d6c1e726c5
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      CURRENT

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Scripts\CURRENT
                                                                                                                                                                      • Size 16B
                                                                                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      cos-bridge.js

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-bridge.js
                                                                                                                                                                      • Size 173B
                                                                                                                                                                      • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      cos-content.js

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-content.js
                                                                                                                                                                      • Size 502B
                                                                                                                                                                      • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      main.js

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\main.js
                                                                                                                                                                      • Size 47KB
                                                                                                                                                                      • SHA256 4c2cc909a2d1ca6b84270a6329e81f0f1de229ce49fd9412033a5c45e1d2e72f
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      favicon_opera_one.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.44.0.4_0\favicon_opera_one.png
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      reader_mode.js

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.44.0.4_0\reader_mode.js
                                                                                                                                                                      • Size 112KB
                                                                                                                                                                      • SHA256 f13bffb4c8373667ab9f08bbb4c9be6ce884a96f9f23048e4de39519155dafc5
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      spotify_frame_interceptor.js

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.44.0.4_0\spotify_frame_interceptor.js
                                                                                                                                                                      • Size 5KB
                                                                                                                                                                      • SHA256 38f24dc260400dff44c04d95244dd245578a618965c692edeb103ef6d46cb5d9
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      background.js

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                                                                                                                      • Size 86KB
                                                                                                                                                                      • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Icon_Light_Neutral.png

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      popup.js.LICENSE.txt

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      rules.json

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                                                                                                                                                      • Size 839B
                                                                                                                                                                      • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      0716a183-b073-4701-8f7e-eb830d17d14f.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\0716a183-b073-4701-8f7e-eb830d17d14f.tmp
                                                                                                                                                                      • Size 27KB
                                                                                                                                                                      • SHA256 354f5ab64937037cc28478591677b9cd55c04130525fd858ebfdb874411a60f6
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      13c2e8f2-7d13-43f5-8fc2-b189bc739889.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\13c2e8f2-7d13-43f5-8fc2-b189bc739889.tmp
                                                                                                                                                                      • Size 27KB
                                                                                                                                                                      • SHA256 316f5bfbead14954bf414da46c67584d3a6c3c24bd31de7a79d5675cda3c92b6
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      185a112f-28d9-47bd-a85a-fda9b299efb6.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\185a112f-28d9-47bd-a85a-fda9b299efb6.tmp
                                                                                                                                                                      • Size 27KB
                                                                                                                                                                      • SHA256 7253d2ef4fe5c071a564e8da1a9bf035b2a365d2f71fbdec15ac5d2b493c33de
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      214e3e68-4add-40c0-a662-d70a73f6a572.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\214e3e68-4add-40c0-a662-d70a73f6a572.tmp
                                                                                                                                                                      • Size 27KB
                                                                                                                                                                      • SHA256 f2356a4edd24e453382db02c7e0c0931bdcdb2d9e46e243868f8232f6f86fb5a
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      71565065-e0ea-41b0-8fd7-f669f2095168.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\71565065-e0ea-41b0-8fd7-f669f2095168.tmp
                                                                                                                                                                      • Size 27KB
                                                                                                                                                                      • SHA256 67fc0c414d16927583a688f553567cc86e1682165d2b03af75b2af197b0d1ce9
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      7f89ce70-733a-4def-a80c-d2fb97f7dcae.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\7f89ce70-733a-4def-a80c-d2fb97f7dcae.tmp
                                                                                                                                                                      • Size 27KB
                                                                                                                                                                      • SHA256 72472b74d71f2ca964413f18fc6078d80f1de88af5ddfe1d45098ab37d69421e
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      83911eaa-46f8-442e-82c7-3f37917a993b.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\83911eaa-46f8-442e-82c7-3f37917a993b.tmp
                                                                                                                                                                      • Size 27KB
                                                                                                                                                                      • SHA256 cc95dbf2bf56e0090333afdab1e6cb96d1614f08ba82bd15f2da37913334c491
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      6d95aab7-1cf8-4eaf-8dce-161dc870f054.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\6d95aab7-1cf8-4eaf-8dce-161dc870f054.tmp
                                                                                                                                                                      • Size 2B
                                                                                                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      Network Persistent State

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                                                                                                                      • Size 111B
                                                                                                                                                                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      Preferences

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                      • Size 15KB
                                                                                                                                                                      • SHA256 e4cb9e3149af6adf4d291742512d2477d7d5760f50f9e0b7504548f5aa542e64
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Preferences

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                      • Size 11KB
                                                                                                                                                                      • SHA256 eaef70345cd14b8def3355d932708287715eee7b1656cc97f0aeeecf1171ccbe
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Preferences

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                                                                                                                      • Size 13KB
                                                                                                                                                                      • SHA256 8f7c92a04bb01f33d8fd26bc39798f68c68428f222ca8ee1ffa4a5f810c3f6ba
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Secure Preferences

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                      • Size 88KB
                                                                                                                                                                      • SHA256 2d25352aa4fcec6db906694cbc3ac2172cf59c19ab7ab56318aaf8509a81bd14
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      Secure Preferences

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                                                                                                                      • Size 204KB
                                                                                                                                                                      • SHA256 01c824b5bd39140061702cfdaf7e393941e3f19b0d46b4cafcf893565011c86b
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      fcdbca18-4619-418e-a381-e0ca4d984f09.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\fcdbca18-4619-418e-a381-e0ca4d984f09.tmp
                                                                                                                                                                      • Size 72B
                                                                                                                                                                      • SHA256 3324a7f3d83c08822c8348fffc7bd210beba0c219896925f5037e096d36cab04
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      the-real-index

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                                      • Size 48B
                                                                                                                                                                      • SHA256 f7cf377f628de6cc9233375b3cba97b77482c69452ac2ea78ace9f81c5cd117a
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      MANIFEST-000001

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Site Characteristics Database\MANIFEST-000001
                                                                                                                                                                      • Size 41B
                                                                                                                                                                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      4e0e3c43-2b53-497e-b390-3473568efde5.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\4e0e3c43-2b53-497e-b390-3473568efde5.tmp
                                                                                                                                                                      • Size 381B
                                                                                                                                                                      • SHA256 e149e8d263eebe8444427609c1d2073d4e03b5f5c98e9ab010b882aaff2a3684
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      62ddd0df-dc7e-41ce-b89a-003bed22560f.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\62ddd0df-dc7e-41ce-b89a-003bed22560f.tmp
                                                                                                                                                                      • Size 381B
                                                                                                                                                                      • SHA256 8be1fa947b280358ae2ade6817c52c58d8541bb2896e57afa881fbf03249a100
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 7b269edf2e6e918c55ed853c6a01ad80cd8d8a1e32945b0ea4c4eec152fc9868
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 8ef9624850c24414f60681c39a339188fb48b1089b748c9be6621f089bc1a89c
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 9b0d3418b5321a47fcd01d3db04ad7eaa43d2de283e1c15573922424f7917b6b
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 1b78315f28ee0eee1aee7b445c0551d5cdeca99268c2a9c0f211bdade2838296
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw
                                                                                                                                                                      • Size 477B
                                                                                                                                                                      • SHA256 26fe77766739482dba308db00268b9a176e8d9598330d737f1b4051e4c91cf83
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw
                                                                                                                                                                      • Size 605B
                                                                                                                                                                      • SHA256 05b6408d21bd20444cec903727db3e960f7e329675af1b08535c105bd1bf0b21
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw
                                                                                                                                                                      • Size 765B
                                                                                                                                                                      • SHA256 c48f1839c69a85bd37f43676d6b375b93fbc52c6d6cbea79dacd4344bd973b19
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw
                                                                                                                                                                      • Size 925B
                                                                                                                                                                      • SHA256 bc25c25be726cf5151512de514af06da155421b5e14b775f8e72b0813c0fc1e6
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 e2255d80f31a8c35b5bebe31840462f6a46ebb45c05468eb3b87af12d88e5eda
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 9aab11a6eba793070b3cfe51ceb8ed168387912c5f91ca6cb86f85fcb2dc775a
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 e77a768351347b4fa2e3a24b2628c85a832d5f03bba854dc3415e786289df1e7
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 690a532c600b15529cc47f47880d7d3d1c894b71dc3bea58a4fedf3432f4e1e0
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_7dd24bf9-d61f-4d5a-8ff8-2a81fab7ffc5.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 b96218ed7f4232e03752f2aea3f8c28ea52a9775394b1b0bbac753c2a4436a25
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 bf383ae3006d501f81e1433798e1a456c41b50e4575f09276e693aeaf1454046
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 9d55b2333997c6cf109415881e6bcd8d77eb67b378e5401eb3e632b36960b770
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 83eaa4625d03a71b715dcc539f5a8be00022e67068c891e86abc50bbf5b55a1a
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 657433565d2dcd01fbf09ea9a9a1197f6d34217555a498bd3da6522e4f3509e1
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 8932b26fb7f3093211c410be946f17169159e912d44dca7dc9a0cce7f6a33ce5
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 8997c6df2459fa033339825bd5fc8b087b5b67257c12dcdcd39e369a530b2381
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 bcbfd817f00036f663356fe299f16e9ac77c3fd84913557edd03106889dae617
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 4d78acfc896e545259e695f128bd8f738d4be27e71645abc20ee9c6542f5e67b
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 10KB
                                                                                                                                                                      • SHA256 7e0e315806351043fab0b71482f0fc0c983465b7b8a56bd24735a5ebc9049c4f
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 10KB
                                                                                                                                                                      • SHA256 53d3a469609c51abae2413597930ef4b40c9cbd0178559b5769c2522ef5506ab
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 477B
                                                                                                                                                                      • SHA256 820bc9d9d22a25d295d62056828e24490ae331e601f725c040ce782d652f8c87
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 733B
                                                                                                                                                                      • SHA256 4a6a2e5cfb2e705c7a19f499c5cda88bdee5927f8965dc1da4a27ba098df64b7
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 909B
                                                                                                                                                                      • SHA256 d4b9d10cd8671714f4ce82644dbde6a1a2e97f97854678a3e3c7e4a31f8450bc
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 957B
                                                                                                                                                                      • SHA256 8893acf55a581d7a07a29fb5ce119ac14abddcf7944e52cbe2065fc0a1a9fd8a
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 d9d3df7ba81c3ce3d18edbb18d144507695116d2d00ed71aeb089523215341f3
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 1e5e76a0209d7d9a68e46cb44d98c8bb1bfabc7dceb69579f8d5a95fe71b5806
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 f89a5dcd058f6efcb1c49db51ba6e076a887938724a69b717edc75cbe41de02e
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 396869f26c87bf1d58b98250d9dc506bd55d03637b2988d76da08ba6ce34d95b
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 6f566582c4cec75277e80b43fc34a7aac15821d46212008778913b9e24131ace
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 a94a2cd1dd4b6ec24aca066e53bb5587e5884a6e369a032a52bbf300c074c209
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 df6d436e2b65ac7350f2028289cfec31820c14c8b077c756f34d85688f96aab6
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 61bb249bf3ab7d6dc2ee8d6ef230340aa5ea68800667ff3e791e1f68dc81c392
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 5e27a8ac1de455d4a607e6ab62df1850ab5563a5a07da7742ac1a41ff90164d3
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 41e4359a0e576eabe614405647887ced4ad7b28edbd871fd3499a81241d9e2d5
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 892ca117bbf5a7b2d0704812305468379e3eabb556dfcf6eb76349dace155368
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 b31a9b3018b5244755993179a9fcbfb3cff0d996948c3697583ba1fd97863785
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 2af4cfe657ae3be6be570c753447c92e472171aab493707ca235463b2623f897
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 32265e148aa1262923016205b44955b79abb525da5483281b24ed167a14ba212
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 31f02832e4c7335611651516ed69be4f9c24bf92f09f8c04749138c8d6092525
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 ef2149637c2e900444368a55bc20d484599223ec40893bc5f60d1179415f653b
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 5f54aa886965b66e78db71a5df9e28540ac79d3c861d99ebcdea1a7aa0e86ef7
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 5b3a3408371831bfea98c7f252aedabb017863a40489dd522060d50b760f78b9
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 f33d5a464bb29815aa81b4c8a517da35d479d1a24d81b3d2b0916a8147736c35
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 c59b67ae490739e4612010daa47d42028d1abcd77ba50bd023d73572393a1bf5
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 2f2f4de4571b98aba145643e98d9fd3ab17cf688642d7a6a77e16cc5abeb58ff
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 10KB
                                                                                                                                                                      • SHA256 67f599e405e77264725e5620c992746672f2655aa97edea53e04a2fe47b894ec
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 605B
                                                                                                                                                                      • SHA256 e37e155b1b250fce37197a1f4a55bb2dfc2c6a12595815537999056484e9e2be
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 7KB
                                                                                                                                                                      • SHA256 1b05374c992bf435c598044c7b8199106768be3ec42baef5f16e7e91f66c8ef7
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 38be4fe0ae9586ff4722d6306fa37bc4792ddf10130db76ca44b82fc0c4e4467
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 7KB
                                                                                                                                                                      • SHA256 16c6d956e93d6bf26d729e0ee6d159058d3728a0ddb40b04ae458b5c0918bf89
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 3c67c23102f1da6a05e24c04b14627beece0a536b1597eaf109f8b8ee83f2a28
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 33ca76444854c06a076ffaa43b5b34b17fdf4ddcd08fcf01e7b41f8379b5b573
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 7KB
                                                                                                                                                                      • SHA256 5c588dc477f4df12d69b4e7081d8eb24ee9afd4cc7360aed709cd1d767d7ed61
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 8aedccdd4be7a63c331a102ba78f285304ca1252357d72057821bf347d36b6b9
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 e4d0486aaa0f55947be5e0d1fbf0307f7c99f1366b97e8e6f1c1502d0bdf68c3
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 da707259c13d145089bf1ed62163cd696edffccecf73076a904708bb27475de8
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 5d32efe580438d91a3fdd2d1d62803eaf31a7be0d90776762aaaad3501143510
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 7KB
                                                                                                                                                                      • SHA256 120e7ca1b1780dfe2303b86256d8a4fb428189b681d1c3e5cd7b1553205da565
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 50544dc0cd9062401c2b51cb7a0df84262d5e0ae7b4049c1c0300eb249eba5db
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 1b069ddee7da78222d7874dda7bf744a2847b7cde79a6089316efb1c237fa9b0
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 74487e6ff15a128890e3502c02d1660779bf575f9f0de36428a2160e3dd14996
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 d0c3e752251e3357cd5d8c728dc830749dc0fffd95f59973d7fbfd14b80f8d93
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 23744dbd1c5eba47da339d1cc9f137000a2be1ea73564ea33f73db2e527d372b
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 7KB
                                                                                                                                                                      • SHA256 708c313770bb8e198d2cb7cdcbd0d18748a28596dea435bb27fcc327eeecc2a3
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 9KB
                                                                                                                                                                      • SHA256 c145c139f78ed831648b466758ce4d590cc5729bbd9b579526fa91b01c6ece00
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 e7c89bcf560ab21667fe1414ed82bc33566925c87550000b8e23fca4eab8096c
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f7aac450-7e8f-476b-9e44-cb88783a07dc.raw
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 6d57ddd38c61cddf2dc030eca280eb9c98b3d4626cf5ff8d9f99bc4240feeb9c
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      b3174fba-f3ac-45f8-91e9-5ee058b812e3.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\b3174fba-f3ac-45f8-91e9-5ee058b812e3.tmp
                                                                                                                                                                      • Size 438B
                                                                                                                                                                      • SHA256 00ea2e5d46abde8e08d54825df49d74a231034676d0cf466568e0d2f2ecba933
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      c2ca5929-27ef-45ff-8cda-24c052d30cba.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\c2ca5929-27ef-45ff-8cda-24c052d30cba.tmp
                                                                                                                                                                      • Size 4KB
                                                                                                                                                                      • SHA256 6188396e007bab04f36c9542837810db01ddd410bb4c1ac0ea7ee914fabd9916
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      dd506aa6-5544-4f36-871f-4287faefa379.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\dd506aa6-5544-4f36-871f-4287faefa379.tmp
                                                                                                                                                                      • Size 4KB
                                                                                                                                                                      • SHA256 28fef6e1b25676f03e5e4a5335b04cd16d0480f6d0af33383ffbfe093d11bdfc
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      f5276424-55ec-4ce6-980e-bde5e5118873.tmp

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\f5276424-55ec-4ce6-980e-bde5e5118873.tmp
                                                                                                                                                                      • Size 609KB
                                                                                                                                                                      • SHA256 fa4339ca7acb762f38a5b6e395872c86bb6042fa8e3152e93929abd3a82aa3a8
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 719B
                                                                                                                                                                      • SHA256 50523b2465f290c55b3a7277840f28b78a3b724caca51534d8e8cd763fec3b10
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 824B
                                                                                                                                                                      • SHA256 efa32057b6c6b355d4c54a5d691ba3d042b06320aeea9299a18dbcf8e6b4aa44
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 6cefccbd623b7ac3360c9fdf988265e8c89efdbc676b19f65976520f23c6515e
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 915B
                                                                                                                                                                      • SHA256 6440fa038bf117417e0219c312e4ba1d1e6d557fb9feb2fdc7fa18f6b393fff4
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 844fc5fcdd1f2bfbb4d8b786886f24cf9c75972e2d0bc2dd8597dc01f26c20a8
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 1008B
                                                                                                                                                                      • SHA256 bf1cf59b7440884c03ff02a51b80dbe180565f088b638861aef61eace0d730e8
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 ac891f74f3877e06020bc8a1dc0a7ae7b8afa0f99acad50f2f82185d0fc79325
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 4KB
                                                                                                                                                                      • SHA256 394765ac9c8b74675ba8f47f084979a33d85409c5d056e31a961eb80986c40f8
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 4KB
                                                                                                                                                                      • SHA256 6c8a3def9bc35390dbd99ae7580058a469c181361ba49a724487f629f28d78bd
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 f1e937cc5fe5d316cf8a66da77c6a03b187ff6a1632873765158bb940312ffeb
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 629B
                                                                                                                                                                      • SHA256 b752d7161cf09f662c5a3b8920f972e2e12b0d9458fcb79fbce16e913f45bf91
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 6d5bf1c53dade09a06050b8bbe6fd017223c4a92a5fde465c863ca90e6406757
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 4KB
                                                                                                                                                                      • SHA256 d5fe8ef82b58ea87e3c38e75bcf6f19dba87c33ffe9cc4da50e352f58ffe8db3
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 ba18e31a8d72b0f8abdc94ddcbb1ad870138ff3d0321ae9e2876159c6de4f860
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 4KB
                                                                                                                                                                      • SHA256 986c68b0e9de1266af95f079ad5326bfea0b4321ed483c807c2c3103aeaca423
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 4KB
                                                                                                                                                                      • SHA256 5f8b493aa8872e4aff5a398b129fb5a4a314cd6dd7542ca6c7c50e3da8a73789
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 4KB
                                                                                                                                                                      • SHA256 b0e7fd28a726c48b69cfb62e39037023feb229c5486b34aa6c966cc2fd3b7aca
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 531B
                                                                                                                                                                      • SHA256 263fd105b8c50786c9997f96854c6f4501700f20bfadc73ed6be2e6ff3a2445f
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 d2b7c350b9477261014622133e41ad7525af78453e379231f766886c4f434607
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp4520.0.1756873091

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.0.1756873091
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 29f663757cb7b2b91c9e6cc7687bda0086e3ee355fc8a2029be966bde8e886d0
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp4520.1.395992482

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.1.395992482
                                                                                                                                                                      • Size 200B
                                                                                                                                                                      • SHA256 f0146323be7106ddb3324838fe22e7d53ee9314ebc98b59d96b9bf42d082b968
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp4520.1.395992482

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4520.1.395992482
                                                                                                                                                                      • Size 249B
                                                                                                                                                                      • SHA256 4049d0149f81af32f4ee4e2ce88ab40fa01e9dbe10e47c50eda9c6423c8fdbd4
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp5728.0.1025385247

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5728.0.1025385247
                                                                                                                                                                      • Size 1KB
                                                                                                                                                                      • SHA256 7768a2853977e2053e9460daed2699ef6298ec9436e8dfdd3df817d72891f8e1
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp5728.0.1025385247

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5728.0.1025385247
                                                                                                                                                                      • Size 266B
                                                                                                                                                                      • SHA256 4c90ef3c99e42a5b203be7f9ac01daedff509c8f493151cb220db180f4b6c7cf
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ssdfp5728.0.1025385247

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5728.0.1025385247
                                                                                                                                                                      • Size 2KB
                                                                                                                                                                      • SHA256 27da0ab57dcab0767d4b1438c4a3147f944bf3e13f6617b0893b7a8a5b087cff
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      data_0

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_0
                                                                                                                                                                      • Size 8KB
                                                                                                                                                                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                      data_1

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GraphiteDawnCache\data_1
                                                                                                                                                                      • Size 264KB
                                                                                                                                                                      • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                                      Local State

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 63b9651bc3bd3a3ba6e1bde484223d22f5cc4c2e70c8114efc4ae99792f3b39a
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      Local State

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 b4ff1dc0897d0405989f2e9dc97b795125eabf2a4f3ea543ef7f6f4992742d91
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      Local State

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 2527871e30852df2b059b6833fb88c1ed970eb21fa4ddbb15c5b8e056b52ba40
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      Preferences

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Preferences
                                                                                                                                                                      • Size 319B
                                                                                                                                                                      • SHA256 35663c318d87402dba355574b893300deb7ecaa87c5c07b772ce9bf26f46a189
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      clids-yabrowser.xml

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Yandex\clids-yabrowser.xml
                                                                                                                                                                      • Size 755B
                                                                                                                                                                      • SHA256 600549774962c0addc55502ed58b5e616898fea666891c8ceabe2cbc43598905
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      ui

                                                                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Yandex\ui
                                                                                                                                                                      • Size 38B
                                                                                                                                                                      • SHA256 5af50aa5a15e2699721d4c4a3ccdea8a5877740ab5ac9fd8b86bc1a55bf39fd6
                                                                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                                                                      MSID5E4.tmp

                                                                                                                                                                      • Path C:\Windows\Installer\MSID5E4.tmp
                                                                                                                                                                      • Size 182KB
                                                                                                                                                                      • SHA256 814b1644c8fe5f1af6b9207e5757c8bb80950e903cfb4e1166bb188ea8577bb7
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      MSID6CF.tmp

                                                                                                                                                                      • Path C:\Windows\Installer\MSID6CF.tmp
                                                                                                                                                                      • Size 187KB
                                                                                                                                                                      • SHA256 2ceae73443e109cbdf36adcfdc0160f2363860dbfb4186cf47cb9130b0283205
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      yandex_browser_service_update.log

                                                                                                                                                                      • Path C:\Windows\SystemTemp\yandex_browser_service_update.log
                                                                                                                                                                      • Size 3KB
                                                                                                                                                                      • SHA256 37188cc3dbfde2cd56cad9ba6dcf33b1c280c5fa61e3fdabc393f3b703ee3dd5
                                                                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                                                                      yandex_browser_service_update.log

                                                                                                                                                                      • Path C:\Windows\SystemTemp\yandex_browser_service_update.log
                                                                                                                                                                      • Size 4KB
                                                                                                                                                                      • SHA256 2c95ad2a84fa7d1b76c22e493a90a98568493acab328a63a16446eead05899fc
                                                                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                                      memory/1164-6698-0x00000000099E0000-0x00000000099EA000-memory.dmp

                                                                                                                                                                      memory/1164-6695-0x00000000099E0000-0x00000000099EA000-memory.dmp

                                                                                                                                                                      memory/1164-6676-0x000000000E4F0000-0x000000000E4FA000-memory.dmp

                                                                                                                                                                      memory/1164-6675-0x000000000E4F0000-0x000000000E4FA000-memory.dmp

                                                                                                                                                                      memory/1164-6558-0x0000000001110000-0x000000000111A000-memory.dmp

                                                                                                                                                                      memory/1164-6564-0x0000000001110000-0x000000000111A000-memory.dmp

                                                                                                                                                                      memory/1164-6610-0x000000000E4F0000-0x000000000E4FA000-memory.dmp

                                                                                                                                                                      memory/1164-6611-0x000000000E4F0000-0x000000000E4FA000-memory.dmp

                                                                                                                                                                      memory/1336-6964-0x00007FFD42690000-0x00007FFD42691000-memory.dmp

                                                                                                                                                                      memory/2016-6803-0x0000000000400000-0x0000000000710000-memory.dmp

                                                                                                                                                                      memory/2016-2965-0x0000000004320000-0x0000000004321000-memory.dmp

                                                                                                                                                                      memory/2016-6-0x0000000002600000-0x0000000002601000-memory.dmp

                                                                                                                                                                      memory/2016-22-0x0000000006640000-0x000000000664F000-memory.dmp

                                                                                                                                                                      memory/2016-2875-0x0000000002600000-0x0000000002601000-memory.dmp

                                                                                                                                                                      memory/2016-2874-0x0000000006640000-0x000000000664F000-memory.dmp

                                                                                                                                                                      memory/2016-3588-0x00000000062E0000-0x00000000062EA000-memory.dmp

                                                                                                                                                                      memory/2016-2873-0x00000000062E0000-0x00000000062EA000-memory.dmp

                                                                                                                                                                      memory/2016-3215-0x0000000000400000-0x0000000000710000-memory.dmp

                                                                                                                                                                      memory/2016-3216-0x00000000062E0000-0x00000000062EA000-memory.dmp

                                                                                                                                                                      memory/2016-6799-0x0000000000400000-0x0000000000710000-memory.dmp

                                                                                                                                                                      memory/2016-4152-0x0000000000400000-0x0000000000710000-memory.dmp

                                                                                                                                                                      memory/2016-2872-0x0000000000400000-0x0000000000710000-memory.dmp

                                                                                                                                                                      memory/2016-2964-0x0000000006A00000-0x0000000006A01000-memory.dmp

                                                                                                                                                                      memory/2016-3484-0x0000000004470000-0x00000000044AC000-memory.dmp

                                                                                                                                                                      memory/2016-3587-0x0000000000400000-0x0000000000710000-memory.dmp

                                                                                                                                                                      memory/2016-2969-0x00000000062E0000-0x00000000062EA000-memory.dmp

                                                                                                                                                                      memory/2016-2970-0x0000000006640000-0x000000000664F000-memory.dmp

                                                                                                                                                                      memory/2016-2968-0x0000000000400000-0x0000000000710000-memory.dmp

                                                                                                                                                                      memory/2248-3038-0x0000025E94160000-0x0000025E94180000-memory.dmp

                                                                                                                                                                      memory/2248-3023-0x0000025E82C60000-0x0000025E82C80000-memory.dmp

                                                                                                                                                                      memory/2248-3005-0x0000025E82D80000-0x0000025E82E80000-memory.dmp

                                                                                                                                                                      memory/2248-3024-0x0000025E82BC0000-0x0000025E82BE0000-memory.dmp

                                                                                                                                                                      memory/2248-2991-0x0000025E801E0000-0x0000025E802E0000-memory.dmp

                                                                                                                                                                      memory/2248-3003-0x0000025E82940000-0x0000025E82960000-memory.dmp

                                                                                                                                                                      memory/3192-6967-0x0000000000400000-0x00000000004CE000-memory.dmp

                                                                                                                                                                      memory/3192-2871-0x0000000000400000-0x00000000004CE000-memory.dmp

                                                                                                                                                                      memory/3192-1-0x0000000000400000-0x00000000004CE000-memory.dmp

                                                                                                                                                                      memory/3644-3221-0x000002D18C6D0000-0x000002D18C98C000-memory.dmp

                                                                                                                                                                      memory/3644-5137-0x000002D18C6D0000-0x000002D18C98C000-memory.dmp

                                                                                                                                                                      memory/5876-4231-0x00007FFD41BF0000-0x00007FFD41BF1000-memory.dmp

                                                                                                                                                                      memory/5876-4230-0x00007FFD42860000-0x00007FFD42861000-memory.dmp

                                                                                                                                                                      memory/7876-6968-0x00007FFD42860000-0x00007FFD42861000-memory.dmp

                                                                                                                                                                      memory/7876-6969-0x00007FFD41BF0000-0x00007FFD41BF1000-memory.dmp