Overview

overview

6

Static

static

1

OperaInstaller.exe

windows10-ltsc_2021-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    322s
  • max time network
    324s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    26/06/2026, 13:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    OperaInstaller.exe
  • Size 178KB
  • Sample260626-qapb7sbw21
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 4 IoCs
    persistence
  • Downloads MZ/PE file 1 IoCs
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks computer location settings 2 TTPs 31 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Windows directory 18 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • System Location Discovery: System Language Discovery 1 TTPs 14 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 64 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 7 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 50 IoCs
  • Modifies system certificate store 2 TTPs 3 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 27 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 18 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller.exe"
    1⤵
    • Downloads MZ/PE file
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4188
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:4832
      • C:\Users\Admin\AppData\Local\Temp\7zS0E293598\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS0E293598\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Enumerates connected drives
        • Executes dropped EXE
        • Modifies system certificate store
        • Suspicious use of WriteProcessMemory
        PID:1880
        • C:\Users\Admin\AppData\Local\Temp\7zS0E293598\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS0E293598\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x2a4,0x2a8,0x2ac,0x284,0x2b0,0x7ff7314a4e08,0x7ff7314a4e14,0x7ff7314a4e20
          4⤵
          • Executes dropped EXE
          PID:5032
        • C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:1328
        • C:\Users\Admin\AppData\Local\Temp\7zS0E293598\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS0E293598\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=1880 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_20260626140436" --session-guid=838bb6aa-ed7b-44b5-b245-4f677f77adc4 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=0807000000000000
          4⤵
          • Enumerates connected drives
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:1984
          • C:\Users\Admin\AppData\Local\Temp\7zS0E293598\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS0E293598\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff7314a4e08,0x7ff7314a4e14,0x7ff7314a4e20
            5⤵
            • Executes dropped EXE
            PID:4448
          • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe" --backend --initial-pid=1880 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361" --session-guid=838bb6aa-ed7b-44b5-b245-4f677f77adc4 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=132.0.5905.102
            5⤵
            • Enumerates connected drives
            • Executes dropped EXE
            • Modifies registry class
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:1576
            • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x29c,0x2a0,0x2a4,0x278,0x2a8,0x7ff6364b4e08,0x7ff6364b4e14,0x7ff6364b4e20
              6⤵
              • Executes dropped EXE
              PID:3928
            • C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Adds Run key to start application
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:2340
              • C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x260,0x264,0x268,0x23c,0x26c,0x394040,0x39404c,0x394058
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:756
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:628
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x260,0x264,0x268,0xec,0x26c,0x924040,0x92404c,0x924058
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:3644
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:4176
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:1220
                    • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x264,0x268,0x26c,0x260,0x270,0x7ffe96a6db70,0x7ffe96a6db80,0x7ffe96a6db90
                      10⤵
                      • Executes dropped EXE
                      PID:4736
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:4788
                    • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x260,0x264,0x26c,0x25c,0x270,0x7ffe96a6db70,0x7ffe96a6db80,0x7ffe96a6db90
                      10⤵
                      • Executes dropped EXE
                      PID:3436
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x294,0x298,0x29c,0x278,0x2a0,0xa8c830,0xa8c83c,0xa8c848
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:3096
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:4156
                      • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x264,0x268,0x26c,0x260,0x270,0x7ffe96a6db70,0x7ffe96a6db80,0x7ffe96a6db90
                        11⤵
                        • Executes dropped EXE
                        PID:2628
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:1448
                      • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x260,0x268,0x26c,0x25c,0x270,0x7ffe96a6db70,0x7ffe96a6db80,0x7ffe96a6db90
                        11⤵
                        • Executes dropped EXE
                        PID:4392
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:2404
                      • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x264,0x268,0x26c,0x260,0x270,0x7ffe96a6db70,0x7ffe96a6db80,0x7ffe96a6db90
                        11⤵
                        • Executes dropped EXE
                        PID:1348
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Adds Run key to start application
              • Checks computer location settings
              • Drops file in Windows directory
              • Executes dropped EXE
              • Loads dropped DLL
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:5784
              • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x264,0x268,0x26c,0x260,0x270,0x7ffe96a6db70,0x7ffe96a6db80,0x7ffe96a6db90
                7⤵
                • Executes dropped EXE
                PID:5808
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1732,i,17750087190302803776,3290521980084671085,262144 --field-trial-handle=1908,i,1111027695803206231,4764034021298572406,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,10516999698242134325,5762307658579036793,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1904 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:5980
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1944,i,3431034042356453052,15333288008026732313,524288 --field-trial-handle=1908,i,1111027695803206231,4764034021298572406,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,10516999698242134325,5762307658579036793,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2192 /prefetch:3
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                PID:6016
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2332,i,6999416814752183003,6282287564598803465,524288 --field-trial-handle=1908,i,1111027695803206231,4764034021298572406,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,10516999698242134325,5762307658579036793,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2504 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:6108
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3440,i,4468373014074019266,3960319191900773015,2097152 --field-trial-handle=1908,i,1111027695803206231,4764034021298572406,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,10516999698242134325,5762307658579036793,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3708 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:3908
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4052,i,3003143352908686766,15480385796989463422,524288 --field-trial-handle=1908,i,1111027695803206231,4764034021298572406,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,10516999698242134325,5762307658579036793,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4060 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:6252
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4076,i,7841189476201633769,5091653231738635766,2097152 --field-trial-handle=1908,i,1111027695803206231,4764034021298572406,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,10516999698242134325,5762307658579036793,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4104 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:6264
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4392,i,17696822124244482334,5693295926057403055,524288 --field-trial-handle=1908,i,1111027695803206231,4764034021298572406,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,10516999698242134325,5762307658579036793,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4412 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6480
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4680,i,8579602632875786824,15886025552996578817,524288 --field-trial-handle=1908,i,1111027695803206231,4764034021298572406,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,10516999698242134325,5762307658579036793,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3924 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:6620
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3420,i,3334155566406472110,5406051960438313072,2097152 --field-trial-handle=1908,i,1111027695803206231,4764034021298572406,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,10516999698242134325,5762307658579036793,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3392 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:6908
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5160,i,2170074986261127262,11561320231258935057,524288 --field-trial-handle=1908,i,1111027695803206231,4764034021298572406,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1912,i,10516999698242134325,5762307658579036793,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5168 /prefetch:8
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:6928
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\additional_file2.tmp"
              6⤵
              • Adds Run key to start application
              • Checks computer location settings
              • Drops file in Windows directory
              • Executes dropped EXE
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:7112
              • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffe96a6db70,0x7ffe96a6db80,0x7ffe96a6db90
                7⤵
                • Executes dropped EXE
                PID:6448
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1996,i,10441429092614841199,8775036648424688350,524288 --field-trial-handle=2088,i,9337970130065831726,6865973322900789240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,693860875095627186,5146681381736866337,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2140 /prefetch:3
                7⤵
                • Executes dropped EXE
                • System Time Discovery
                • Enumerates system info in registry
                PID:5200
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1728,i,18406397079816899829,7108870228888907442,262144 --field-trial-handle=2088,i,9337970130065831726,6865973322900789240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,693860875095627186,5146681381736866337,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2084 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:6200
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2424,i,13563956357314927195,14687131868527616393,524288 --field-trial-handle=2088,i,9337970130065831726,6865973322900789240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,693860875095627186,5146681381736866337,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2440 /prefetch:8
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:6496
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3820,i,15917379301846375412,13787304790859041988,2097152 --field-trial-handle=2088,i,9337970130065831726,6865973322900789240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,693860875095627186,5146681381736866337,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3840 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:6772
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4192,i,12700866394664977161,8046855134390550929,524288 --field-trial-handle=2088,i,9337970130065831726,6865973322900789240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,693860875095627186,5146681381736866337,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4332 /prefetch:8
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:7020
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4252,i,4966272859431038222,5737376298965453915,2097152 --field-trial-handle=2088,i,9337970130065831726,6865973322900789240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,693860875095627186,5146681381736866337,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4352 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:6876
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4408,i,870365732857265081,11117154198601484909,2097152 --field-trial-handle=2088,i,9337970130065831726,6865973322900789240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,693860875095627186,5146681381736866337,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4652 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:7108
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3404,i,3274092152837047438,17400201728578793116,524288 --field-trial-handle=2088,i,9337970130065831726,6865973322900789240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,693860875095627186,5146681381736866337,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4956 /prefetch:8
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:6312
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4792,i,3259769547623795011,15334527134117014837,524288 --field-trial-handle=2088,i,9337970130065831726,6865973322900789240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,693860875095627186,5146681381736866337,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4952 /prefetch:8
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:7080
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5180,i,9500780454866689523,14769589037241181328,524288 --field-trial-handle=2088,i,9337970130065831726,6865973322900789240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2092,i,693860875095627186,5146681381736866337,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5172 /prefetch:8
                7⤵
                • Enumerates system info in registry
                PID:5788
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Adds Run key to start application
              • Checks computer location settings
              • Drops file in Windows directory
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of FindShellTrayWindow
              PID:6140
              • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffe96a6db70,0x7ffe96a6db80,0x7ffe96a6db90
                7⤵
                  PID:6452
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1728,i,16456109592096580150,6296442211957348898,262144 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2040 /prefetch:2
                  7⤵
                  • Enumerates system info in registry
                  PID:6436
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1936,i,2866413537196265698,9679320500206566090,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2060 /prefetch:3
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • System Time Discovery
                  PID:5168
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2376,i,14381290589815222394,7859765791027928888,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2592 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:5924
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3144,i,16383857831674487517,9715067003275832441,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3272 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:5860
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3156,i,9706266191603316117,18424677936412891843,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3292 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:5940
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3168,i,266641751461261347,1519163857077535004,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3312 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:5852
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3132,i,1918240346541762147,16490376329033123736,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3252 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:5872
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2648,i,10916554569400005506,1866196430259955539,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3092 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:6364
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3108,i,11564978116125258201,12141041215206081801,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3212 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:6120
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3120,i,16762079481316196152,1869128412434563426,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3232 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:5900
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3484,i,1863610993431880170,15171772722854997789,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4032 /prefetch:1
                  7⤵
                  • Checks computer location settings
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:6508
                • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_gx_splash.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                  7⤵
                  • Modifies registry class
                  • Suspicious use of AdjustPrivilegeToken
                  PID:6608
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4648,i,857232253894771090,8069004692238987008,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4652 /prefetch:2
                  7⤵
                  • Checks computer location settings
                  PID:6408
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4808,i,15488147973720165123,11783517259785198404,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4836 /prefetch:1
                  7⤵
                  • Checks computer location settings
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:4116
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5100,i,17957939074196636660,12304796950775287585,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5112 /prefetch:1
                  7⤵
                  • Checks computer location settings
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:5912
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5260,i,16424866572181171013,1596147888994239159,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5272 /prefetch:1
                  7⤵
                  • Checks computer location settings
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:6060
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6092,i,586346928930078083,13235992918226760276,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6120 /prefetch:2
                  7⤵
                  • Checks computer location settings
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:6844
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6808,i,6917449217783609620,3713210440977265959,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6876 /prefetch:2
                  7⤵
                  • Checks computer location settings
                  PID:3252
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6920,i,16917351034066094649,16986756931709903127,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=7004 /prefetch:2
                  7⤵
                  • Checks computer location settings
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:4480
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5492,i,4098622168123171351,11597282170074578060,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6460 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:7472
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6148,i,7928271807078162092,17875798263521424495,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6464 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:7484
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7252,i,3990835031610017995,8750055377237389051,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7380 /prefetch:8
                  7⤵
                    PID:7496
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7412,i,14011181519780126718,2990571270860715922,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7512 /prefetch:8
                    7⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:7508
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7548,i,11441292679294507589,14000348642156882994,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7652 /prefetch:8
                    7⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:7520
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7668,i,10766191834144554522,2583018744722328603,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7788 /prefetch:8
                    7⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:7532
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7808,i,10643656645957435136,7181538564076515035,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7820 /prefetch:8
                    7⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:7540
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7792,i,2887600515609828386,18107916838571295715,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7972 /prefetch:8
                    7⤵
                      PID:7556
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8164,i,3259145624744826344,3213914785963448964,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8172 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:7568
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8332,i,10500056032276288274,9014180238338281650,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8312 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:7580
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8444,i,15292999718452355967,8852744913828102484,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8452 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:7604
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8604,i,1707613015524619943,7185092486160313914,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8480 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:7628
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8628,i,12836919695393994882,2993460726214620773,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8620 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:7636
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8592,i,13204744106928424920,6255784669057754327,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8884 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:7652
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8880,i,12704962686987571787,15834710052321164038,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8908 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:7660
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --metrics-shmem-handle=9260,i,2321268043948269790,17906855591725872998,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9264 /prefetch:2
                      7⤵
                      • Checks computer location settings
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:6032
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9452,i,2799742434644820093,4251077216178176958,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9344 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:6980
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9268,i,6052999043785046289,15200600973315341271,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9572 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:6780
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9712,i,4744782061247158324,8912205742137727386,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9700 /prefetch:8
                      7⤵
                        PID:956
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --metrics-shmem-handle=9860,i,17945029226529176518,8579372814067693426,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9876 /prefetch:1
                        7⤵
                        • Checks computer location settings
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:5460
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9304,i,11873648006252321456,11188277645397966585,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9300 /prefetch:8
                        7⤵
                        • Enumerates system info in registry
                        PID:6088
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10616,i,7324076928753854459,1077989364711657014,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=3492 /prefetch:8
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:8492
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10744,i,3773323925734827937,5304215761568965268,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10756 /prefetch:8
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:8564
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10904,i,9827864944682954138,13813666993186074322,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=10916 /prefetch:8
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        • Enumerates system info in registry
                        PID:8664
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11072,i,11096505787222495391,16607228902384593171,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11084 /prefetch:8
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:8764
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11216,i,7732743884092186078,6124301993233566317,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11228 /prefetch:8
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:8816
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11364,i,14708444795858362127,8052781295793764614,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11380 /prefetch:8
                        7⤵
                        • System Network Configuration Discovery: Internet Connection Discovery
                        PID:8872
                      • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe" --fix-taskbar-pins
                        7⤵
                        • Enumerates system info in registry
                        PID:8720
                        • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x2a4,0x2a8,0x2ac,0x280,0x2b0,0x7ff6364b4e08,0x7ff6364b4e14,0x7ff6364b4e20
                          8⤵
                            PID:8944
                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                          7⤵
                          • Enumerates system info in registry
                          PID:7672
                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                            C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff73a0f0900,0x7ff73a0f090c,0x7ff73a0f0918
                            8⤵
                              PID:7436
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --metrics-shmem-handle=10888,i,9657160997421861795,745763879146478237,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=10696 /prefetch:1
                            7⤵
                            • Checks computer location settings
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:7856
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11160,i,1064157950526558372,10187356305317211267,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=11132 /prefetch:8
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:8416
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11200,i,473084910782970837,11281285351755608955,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=11196 /prefetch:8
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:8496
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11124,i,16005406895917795480,12123299055300293557,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=6584 /prefetch:8
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:8616
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11480,i,1351432246598466817,8876440737496299305,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=11472 /prefetch:8
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:8632
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=8852,i,7345426376786090768,3406095396511855719,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=8836 /prefetch:2
                            7⤵
                            • Checks computer location settings
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:6100
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6580,i,13817594009940575815,14113202276937770252,524288 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=11468 /prefetch:8
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:6444
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=8764,i,15667370310749243366,3548817765990136901,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=11440 /prefetch:2
                            7⤵
                            • Checks computer location settings
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:7256
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=7264,i,295419880426332176,13156843676760509769,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=11032 /prefetch:1
                            7⤵
                            • Checks computer location settings
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:5440
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=4756,i,6064521685566710160,13943124280318265979,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=4580 /prefetch:2
                            7⤵
                            • Checks computer location settings
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:8596
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=600,i,11130445404489579467,18200812576230035182,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=6876 /prefetch:1
                            7⤵
                            • Checks computer location settings
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:8296
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=6472,i,5161363255962892510,18033702176838631921,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=6944 /prefetch:1
                            7⤵
                            • Checks computer location settings
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:8548
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=11252,i,162047925430636512,8501943905338144358,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=4672 /prefetch:2
                            7⤵
                            • Checks computer location settings
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:9188
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=812,i,3372571115932231630,16228771066527310130,262144 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=816 /prefetch:8
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Suspicious behavior: EnumeratesProcesses
                            PID:7204
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=8504,i,10950099881132585212,396812599307106220,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=6432 /prefetch:2
                            7⤵
                            • Checks computer location settings
                            PID:7772
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=5008,i,17978500079740249865,104613684318353133,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=6860 /prefetch:2
                            7⤵
                            • Checks computer location settings
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:2084
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:amp-requests-stats=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-on-booking-cms-configuration=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-allegro-attributions=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner-ref=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=8876,i,10855780174843410664,3114262043977360480,2097152 --field-trial-handle=2044,i,6348911733456114209,8777064825036415461,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1960,i,11260433714716049963,2539493389422744991,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=8524 /prefetch:2
                            7⤵
                            • Checks computer location settings
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:4228
                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --edition --host=https://autoupdate.opera.com/ --installationdatadir="C:\Users\Admin\AppData\Local\Programs\Opera" --installdir="C:\Users\Admin\AppData\Local\Programs\Opera" --lang=en-US --pipeid --producttype --requesttype=shutdown --version=132.0.5905.102 --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --firstrunver=132.0.5905.102 --firstrunts=1782479121 --consent-info=eyJzdGF0aXN0aWNzX2NvbGxlY3Rpb25fZW5hYmxlZCI6dHJ1ZSwidXNlcl9leHBlcmllbmNlX21ldHJpY3NfcmVwb3J0aW5nX2VuYWJsZWQiOnRydWV9
                            7⤵
                              PID:6312
                              • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0x7ff73a0f0900,0x7ff73a0f090c,0x7ff73a0f0918
                                8⤵
                                  PID:5492
                        • C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                          "C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                          4⤵
                          • Executes dropped EXE
                          • System Location Discovery: System Language Discovery
                          PID:2912
                        • C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\assistant\assistant_installer.exe
                          "C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\assistant\assistant_installer.exe" --version
                          4⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • System Location Discovery: System Language Discovery
                          • Suspicious use of WriteProcessMemory
                          PID:4712
                          • C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\assistant\assistant_installer.exe
                            "C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x268,0x26c,0x270,0x188,0x274,0x394040,0x39404c,0x394058
                            5⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • System Location Discovery: System Language Discovery
                            PID:4604
                  • C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService
                    1⤵
                    • Suspicious use of AdjustPrivilegeToken
                    • Suspicious use of WriteProcessMemory
                    PID:3592
                    • C:\Windows\system32\dashost.exe
                      dashost.exe {aec7dfdd-cc40-46b7-871936319fbd29fb}
                      2⤵
                        PID:2368
                    • C:\Windows\SysWOW64\DllHost.exe
                      C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                      1⤵
                      • System Location Discovery: System Language Discovery
                      • Suspicious use of SetWindowsHookEx
                      PID:4340
                    • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                      1⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Location Discovery: System Language Discovery
                      • Suspicious use of FindShellTrayWindow
                      • Suspicious use of SendNotifyMessage
                      • Suspicious use of WriteProcessMemory
                      PID:3768
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Suspicious use of WriteProcessMemory
                        PID:4428
                        • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffe96a6db70,0x7ffe96a6db80,0x7ffe96a6db90
                          3⤵
                          • Executes dropped EXE
                          PID:2596
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Suspicious use of WriteProcessMemory
                        PID:5060
                        • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffe96a6db70,0x7ffe96a6db80,0x7ffe96a6db90
                          3⤵
                          • Executes dropped EXE
                          PID:2704
                      • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x274,0x278,0x27c,0x220,0x280,0xa8c830,0xa8c83c,0xa8c848
                        2⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        • Suspicious use of WriteProcessMemory
                        PID:2976
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                          3⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • Enumerates system info in registry
                          • Suspicious use of WriteProcessMemory
                          PID:3900
                          • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                            C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffe96a6db70,0x7ffe96a6db80,0x7ffe96a6db90
                            4⤵
                            • Executes dropped EXE
                            PID:2244
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                          3⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • Enumerates system info in registry
                          • Suspicious use of WriteProcessMemory
                          PID:5196
                          • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                            C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffe96a6db70,0x7ffe96a6db80,0x7ffe96a6db90
                            4⤵
                            • Executes dropped EXE
                            PID:5264
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                          3⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • Suspicious use of WriteProcessMemory
                          PID:5396
                          • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                            C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x260,0x264,0x268,0x25c,0x26c,0x7ffe96a6db70,0x7ffe96a6db80,0x7ffe96a6db90
                            4⤵
                            • Executes dropped EXE
                            PID:5452
                    • C:\Windows\system32\wbem\unsecapp.exe
                      C:\Windows\system32\wbem\unsecapp.exe -Embedding
                      1⤵
                        PID:5256
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                        1⤵
                        • Executes dropped EXE
                        • Suspicious use of WriteProcessMemory
                        PID:6528
                        • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x258,0x260,0x264,0x25c,0x268,0x7ffe96a6db70,0x7ffe96a6db80,0x7ffe96a6db90
                          2⤵
                          • Executes dropped EXE
                          PID:6804
                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                        1⤵
                        • Enumerates system info in registry
                        PID:7396
                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x274,0x278,0x27c,0x20c,0x280,0x7ff73a0f0900,0x7ff73a0f090c,0x7ff73a0f0918
                          2⤵
                            PID:7512
                          • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                            "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                            2⤵
                              PID:8800

                          Network

                                MITRE ATT&CK Enterprise v16

                                Reconnaissance

                                Resource Development

                                Initial Access

                                Execution

                                Persistence

                                Boot or Logon Autostart Execution

                                1
                                T1547

                                Registry Run Keys / Startup Folder

                                1
                                T1547.001

                                Event Triggered Execution

                                1
                                T1546

                                Component Object Model Hijacking

                                1
                                T1546.015

                                Privilege Escalation

                                Boot or Logon Autostart Execution

                                1
                                T1547

                                Registry Run Keys / Startup Folder

                                1
                                T1547.001

                                Event Triggered Execution

                                1
                                T1546

                                Component Object Model Hijacking

                                1
                                T1546.015

                                Defense Evasion

                                Modify Registry

                                3
                                T1112

                                Subvert Trust Controls

                                1
                                T1553

                                Install Root Certificate

                                1
                                T1553.004

                                Credential Access

                                Credentials from Password Stores

                                1
                                T1555

                                Credentials from Web Browsers

                                1
                                T1555.003

                                Unsecured Credentials

                                1
                                T1552

                                Credentials In Files

                                1
                                T1552.001

                                Discovery

                                Peripheral Device Discovery

                                1
                                T1120

                                Query Registry

                                6
                                T1012

                                System Information Discovery

                                5
                                T1082

                                System Location Discovery

                                1
                                T1614

                                System Language Discovery

                                1
                                T1614.001

                                System Network Configuration Discovery

                                1
                                T1016

                                Internet Connection Discovery

                                1
                                T1016.001

                                System Time Discovery

                                1
                                T1124

                                Lateral Movement

                                Collection

                                Data from Local System

                                1
                                T1005

                                Command and Control

                                Exfiltration

                                Impact

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                • Size 1KB
                                • SHA256 71ccd39de69ec147afd8ad4337a36829dcababbf40897250380c7770de551242
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                B46811C17859FFB409CF0E904A4AA8F8
                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
                                • Size 528B
                                • SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                • Size 471B
                                • SHA256 bf1bdafd9215b22934ca9c3be6ae14ce731e7c82b5873b97884bc465d3769b0e
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                • Size 174B
                                • SHA256 f7af8cad09ab152f16369132bea070896914b024919ff3288a56c7e6e16c857e
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                B46811C17859FFB409CF0E904A4AA8F8
                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
                                • Size 170B
                                • SHA256 71df67d7795734c715abea3e2dfd452a242c8679ed5be8c271d75777dd609ce6
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                • Size 416B
                                • SHA256 682dfcbde64fa11133811467a5a5e8a439d9e82d6e31544ce8f90a6349cde0c0
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                data_0
                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                • Size 44KB
                                • SHA256 44e72de0a7503a10daaf131dca606fea380d8c32c2e86fff54450e5f079cbd00
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                f_000001
                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                • Size 162KB
                                • SHA256 66d73eb21609703fdaf1292b4636c02169ad14c226cefd9f5f8a36468fdb1ecd
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                installer.exe
                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe
                                • Size 8.3MB
                                • SHA256 67f3216dbe076cecc9e8f44dccdcedbd4e1a0131c4f485e5cc31384e3f566f55
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                installer_prefs.json
                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                • Size 1KB
                                • SHA256 38bcb4ef08634165785b2078956c1d9893ba071ef5af6f70973b96c584ed48c8
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Opera Browser.lnk
                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\Opera Browser.lnk
                                • Size 1KB
                                • SHA256 7b0a3794868fff88be67226d99356d09a51e3e66bce6e9bee94506d0e632e447
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                additional_file0.tmp
                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\additional_file0.tmp
                                • Size 2.8MB
                                • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                assistant_installer.exe
                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\assistant\assistant_installer.exe
                                • Size 2.4MB
                                • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                dbgcore.DLL
                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\assistant\dbgcore.DLL
                                • Size 222KB
                                • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                dbghelp.dll
                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\assistant\dbghelp.dll
                                • Size 1.8MB
                                • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                installer_prefs_include.json
                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\installer_prefs_include.json
                                • Size 224B
                                • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                installer_prefs_include.json
                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\installer_prefs_include.json
                                • Size 239B
                                • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                installer_prefs_include.json
                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\8965470c-53b6-45e8-a42f-beb80b7c3894 Opera Installer Temp\opera_package_202606261404361\installer_prefs_include.json
                                • Size 1KB
                                • SHA256 4d69938933f3eaf4a0a6ec63e9fda64f058fa67a48ae6f2bdbdd3e808f533305
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                installer.exe
                                • Path C:\Users\Admin\AppData\Local\Temp\7zS0E293598\installer.exe
                                • Size 8.3MB
                                • SHA256 127384a7702d51649f429b462e28f75344a528eec7aaabb60151912fbb788bfa
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                OpInst.exe
                                • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                • Size 3.1MB
                                • SHA256 37afeeb7445bb6faed728c92a1b916140230f1769dbfd8e0df8432dc2f47375c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                bg.png
                                • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                • Size 224KB
                                • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                favicon_opera_one.png
                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5784_1661581803\CRX_INSTALL\favicon_opera_one.png
                                • Size 2KB
                                • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Icon_Light_Neutral.png
                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6140_1493786940\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                • Size 2KB
                                • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                messages.json
                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7112_1377435038\CRX_INSTALL\_locales\es\messages.json
                                • Size 527B
                                • SHA256 1947d1ebd22ed6cc132730012b53bff0e86957c8f80fc285ba8c4e910acf22a0
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                preview.png
                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7112_1377435038\CRX_INSTALL\wallpaper\preview.png
                                • Size 464KB
                                • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                settings.dat
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                • Size 40B
                                • SHA256 913fb0cd2415177163285a98534d958a20dc35ebfd69f7967f60ca9f47d316d7
                                • MD5 SHA1 SHA512
                                Submit Download

                                03be1e97-ad98-4632-ae73-256347ff6008.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\03be1e97-ad98-4632-ae73-256347ff6008.tmp
                                • Size 456B
                                • SHA256 c8848e277a8ceddd485e9c974babfec660649c5991f8f73259b76f9278217aa5
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                05b6bc5a-16c5-4218-99f3-726134b12d57.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\05b6bc5a-16c5-4218-99f3-726134b12d57.tmp
                                • Size 203B
                                • SHA256 dd1914239d43453c6631dccd636bc0cda88dffe658a1baceb9bb18a77ea7bbe7
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                2a64bd51-818c-49b9-ace8-14648014b3d2.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\2a64bd51-818c-49b9-ace8-14648014b3d2.tmp
                                • Size 171B
                                • SHA256 aa06388a4f148c9f06a1f60919fc6d759c9ac956367476a2a22a51c54d9fc0be
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                3e31b5b7-6cdf-44e3-99dc-add1077fe2e3.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\3e31b5b7-6cdf-44e3-99dc-add1077fe2e3.tmp
                                • Size 609KB
                                • SHA256 308685566573ae8b6d4d81f64298f7d04570db75cda58b5f6e7277187cc23cbf
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Bookmarks
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                • Size 36KB
                                • SHA256 f5ab5800dce0b888145ab8ddae6d1e64b434efe9372278f1583e52fc9dcc7861
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                BookmarksExtras
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                • Size 257KB
                                • SHA256 f766e50e79eea4093f76c199ed69d152e685a123a44ae500dd6448907ce16ec0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                the-real-index
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                • Size 48B
                                • SHA256 6e28be4b0cd429409ca4502b3b244ae21f19b55c59dc464bec6ff4c72fb6dd61
                                • MD5 SHA1 SHA512
                                Submit Download

                                the-real-index
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                • Size 264B
                                • SHA256 c9e4e4e07c0e106d2c267b64e7c983d21beaf6b293aa98a2d32e1e1bbfa0015f
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                the-real-index
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                • Size 264B
                                • SHA256 1d29f73c70e86e0366b8acb5c7cb70886de974118d8fc551e1dab29e2eba845b
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                the-real-index
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                • Size 792B
                                • SHA256 a90a53b356bc0f5059d2a97b688c5d34d1622735d38de90162b56f06a4f56dff
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                the-real-index
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                • Size 984B
                                • SHA256 66f51901d1ced7ee62c1f773a13ec95c855141af423e51ec7d8c965bd0a50382
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                the-real-index
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                • Size 792B
                                • SHA256 d56235f3bbd55c64780d05afb578e40eebf0f1c28a93fc7a5b8a30210879bce9
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                data_1
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_1
                                • Size 264KB
                                • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                • MD5 SHA1 SHA512 SSDEEP
                                Submit Download

                                data_0
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_0
                                • Size 8KB
                                • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                • MD5 SHA1 SHA512 SSDEEP
                                Submit Download

                                CURRENT
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\CURRENT
                                • Size 16B
                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                • MD5 SHA1 SHA512
                                Submit Download

                                MANIFEST-000001
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extension Rules\MANIFEST-000001
                                • Size 41B
                                • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                • MD5 SHA1 SHA512
                                Submit Download

                                cos-bridge.js
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-bridge.js
                                • Size 173B
                                • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                cos-content.js
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-content.js
                                • Size 502B
                                • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                main.js
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\main.js
                                • Size 47KB
                                • SHA256 4c2cc909a2d1ca6b84270a6329e81f0f1de229ce49fd9412033a5c45e1d2e72f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                favicon_opera_one.png
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.44.0.4_0\favicon_opera_one.png
                                • Size 2KB
                                • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                reader_mode.js
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.44.0.4_0\reader_mode.js
                                • Size 112KB
                                • SHA256 f13bffb4c8373667ab9f08bbb4c9be6ce884a96f9f23048e4de39519155dafc5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                spotify_frame_interceptor.js
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.44.0.4_0\spotify_frame_interceptor.js
                                • Size 5KB
                                • SHA256 38f24dc260400dff44c04d95244dd245578a618965c692edeb103ef6d46cb5d9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                background.js
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                • Size 86KB
                                • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Icon_Light_Neutral.png
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                • Size 2KB
                                • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                popup.js.LICENSE.txt
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                • Size 1KB
                                • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                rules.json
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                • Size 839B
                                • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                data_2
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\GPUCache\data_2
                                • Size 8KB
                                • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                • MD5 SHA1 SHA512 SSDEEP
                                Submit Download

                                data_3
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\GPUCache\data_3
                                • Size 8KB
                                • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                • MD5 SHA1 SHA512 SSDEEP
                                Submit Download

                                4eaf73bb-9c11-4edc-96eb-607600db928c.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\4eaf73bb-9c11-4edc-96eb-607600db928c.tmp
                                • Size 27KB
                                • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                877473b8-ecf9-4f36-8443-8da149b7698b.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\877473b8-ecf9-4f36-8443-8da149b7698b.tmp
                                • Size 27KB
                                • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                8a652953-f996-41d9-84eb-5b369b3ca817.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\8a652953-f996-41d9-84eb-5b369b3ca817.tmp
                                • Size 27KB
                                • SHA256 c5b282a24d9ef3ca8b9ec9a229d76f55e76c8765f3d55b13ae9d0f6501c7b0fd
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                aed5b70d-70b4-4900-ae22-643f10c0a95f.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\aed5b70d-70b4-4900-ae22-643f10c0a95f.tmp
                                • Size 27KB
                                • SHA256 7253d2ef4fe5c071a564e8da1a9bf035b2a365d2f71fbdec15ac5d2b493c33de
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                b1955f1b-bdb5-4ec2-a57c-854c0b01e49d.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\b1955f1b-bdb5-4ec2-a57c-854c0b01e49d.tmp
                                • Size 27KB
                                • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                c7a16bc2-527d-4d92-9818-6bce4b96cc99.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\c7a16bc2-527d-4d92-9818-6bce4b96cc99.tmp
                                • Size 27KB
                                • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Network Persistent State
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                • Size 3KB
                                • SHA256 3bbc952e021f9e3e5ea2e3b4c85e9efa1d406a9b07503d3439eac1179c5c8eec
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Network Persistent State
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                • Size 2KB
                                • SHA256 95a9f4410386612b6d58eb454a81289764839065b69123b64fa9e6d334736680
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                TransportSecurity
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\TransportSecurity
                                • Size 1KB
                                • SHA256 0cc1eed6ac69a5c3f429e93820e3c214f299658ea6a9102fc99cd98ed94b0415
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                f33830d5-1d68-406c-a945-973200c6a3af.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\f33830d5-1d68-406c-a945-973200c6a3af.tmp
                                • Size 2B
                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                • MD5 SHA1 SHA512
                                Submit Download

                                Preferences
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                • Size 16KB
                                • SHA256 4034c1415659dc5bcbcd50790dc89e6dd6997446c4a5e389c01d0a005d8e420e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Preferences
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                • Size 15KB
                                • SHA256 e9db03b6167883988a67088821e922f8d49c505d56420ab2502289ccb579fe6a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Preferences
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                • Size 16KB
                                • SHA256 7111342a06a6fc94788f81bdedcccb4bbf2f79c298f36b336aae8aee3f598fa9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Preferences
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                • Size 19KB
                                • SHA256 fbf91c2e35cdd1d3525958e8b0297dcd2e1f6f0292b19f62ca910573ad9ee0e0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Preferences
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                • Size 10KB
                                • SHA256 9cfa6247528a59d3e671bc0deaabc2f5aee3ddbfd9c680026d71cd40dd177ca8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Preferences
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                • Size 15KB
                                • SHA256 a25ff445a547082d790a27a9c982ceff50db1700155179ed7edfdba66394da0b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Preferences
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                • Size 16KB
                                • SHA256 8eae5325889823cb03bc89934f6161baef60574369a1877f62a36f8aae8eb5da
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Secure Preferences
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                • Size 92KB
                                • SHA256 0ab715dd1564090aeb82686b643426a9136e33bbf167d4e3a30c8de365305944
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Secure Preferences
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                • Size 208KB
                                • SHA256 fd7f0407d336d5ca4592ffc08da4b2d7e59d8b7d1f8785b5c1df4ea422c3da88
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Secure Preferences
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                • Size 91KB
                                • SHA256 41ac749d4a05c8df91aeb23931d51b1174f6cdf8a4e00fad2ef56e55f9afb5d2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                2a0afd649b00527b_0
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\2a0afd649b00527b_0
                                • Size 48KB
                                • SHA256 24489b028f525f139f9909d53eda8125e8956838d1f626463cf00d77a8846c29
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                0710f52e-3283-4aa1-92cd-2f1918d2033a.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\0710f52e-3283-4aa1-92cd-2f1918d2033a.tmp
                                • Size 72B
                                • SHA256 7ebf7dc6875d0a0a4e5faa77c33474aa8f2a3ed0eecfdf1651f6907fe6bcf09b
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                the-real-index
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                • Size 48B
                                • SHA256 2607c22aab19a804603d8c6d06e84d46879cb0def824dece9464fc806c19d270
                                • MD5 SHA1 SHA512
                                Submit Download

                                the-real-index
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                • Size 96B
                                • SHA256 1c61575073e7b2e041175085ed7b162c42d28305a1df8091dc862c3839d2bd15
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                the-real-index
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                • Size 288B
                                • SHA256 7256656d24e5698d1f28744510c944b12c34090fee4566101a68d3130306ca49
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                67341238-6608-442b-ae03-ac25afeea05d.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\67341238-6608-442b-ae03-ac25afeea05d.tmp
                                • Size 381B
                                • SHA256 e0084f27111c233a118afbb2360ad0bbfa641bc496241cc9165d32ebe10ed26d
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                729f0015-13ed-44d4-bb97-9aa48473ceef.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\729f0015-13ed-44d4-bb97-9aa48473ceef.tmp
                                • Size 765B
                                • SHA256 52a1976307131657fb8150927d17ba3ea27730fd7793fda1de2883fccc36731a
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                8bd193e2-fac8-4f2b-a749-858dea4b011e.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\8bd193e2-fac8-4f2b-a749-858dea4b011e.tmp
                                • Size 381B
                                • SHA256 8f5aceaabddb26f4435fe7a466754e93e903f670f1a7585fd56287e4ca3947db
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ee100ba3-2cff-40d9-bbc6-9f2d456b236b.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\ee100ba3-2cff-40d9-bbc6-9f2d456b236b.tmp
                                • Size 381B
                                • SHA256 f08d9a4433a595a819145e4f71425c7912e9708ad20685cc52a7bfbf94769e38
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 17KB
                                • SHA256 9b645ee8d59360bc959b976d5284e0b3a7c729f55604eba54e31a98fe750a163
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 12KB
                                • SHA256 03d28d0d7e50861c2aa0ce6772f7c0d39768ec7f460d687310b81f1b2ed234a5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 11KB
                                • SHA256 b8c7dbfe571b086ef48a6e7ba2ab0246ba48f9915d5c76cfbd658d32f15b96ba
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 14KB
                                • SHA256 71449c99308c5a872883d9f6b777d3c04740c5975da851b12351ba6bf74bf84c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 13KB
                                • SHA256 1b0f7a020b178d6893e4470e87bc96c027f52b1d448cc627171a758116a950d5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 326b2b4b593f5f683755b4b76cb6eb04a84bde1bafcd3b6f531d4336855d72db
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 fe125a4aa6d838892c8259d0d72e182aa13fec662b8cb4da13cd6628fa88da72
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 e7ca34d6e46e9fb2034bf050096ccd681ec6e29c792a987951e8beefd0c647ab
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 fd9cdb1bf5994dbe051ee0a24587a62e1acb5a289a4789f82ded1637d6781d12
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 e1074317aedd435592d89990c84d5f1c234118eaad63960373203705c5fb5528
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 17KB
                                • SHA256 4e03d52bd2725d533488609ffc1a7b98dc3b013b6878e0edd6122c237e17d7d0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 18KB
                                • SHA256 6cec9687a8b77205a63a3cdb4ac84936cdb29f25dcad61603218cd251c59239f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 18KB
                                • SHA256 08bb7d01dce719e33d9638f476c2d7e3aeb1cd2d8b4461c2e7c9464cd36c1b30
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 18KB
                                • SHA256 4af0abcb27ebd74076c18a5f8719ebc7b2a5157b44cc4889bfc20e3125aff415
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 18KB
                                • SHA256 825d91672e34ff4846a08a91647ae666df1f32417fd2e94aa159a1e37200c37f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 18KB
                                • SHA256 fbcc314a7007b8904277597ea614bcc377b76dc41cd64f91dcd03c73dcef2191
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 18KB
                                • SHA256 15407f28bd39d3b1b376feff33a46caa4518d99a2aaa2bd78f8b47afb33c93d8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 19KB
                                • SHA256 135235e43696d1ba1410e011756a00594b5e5a9788a32a3361de787957bce8e3
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 20KB
                                • SHA256 f71652676d9c1072b69f83bf91662b18993a400e6faed958bad63b9859fe5033
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 20KB
                                • SHA256 bc31178fe66271d1c3d73b5aae635fa9a59edfb8c2b68398d44d3039fc791633
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 20KB
                                • SHA256 c6885f773c141021b09af544b94f24707f7adcb395161889696e019a1c194461
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 20KB
                                • SHA256 a45f11ec3cf012747bd6701e1d4c7939f2537241e2684776c02ba155ff082c3b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 21KB
                                • SHA256 9bcfc5cb50d5694a03ffd5a8aa18907f967390e6c7b9bc415c8bb6f72f529022
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 21KB
                                • SHA256 836f33690132e3e54985e60a0fa4103e1c0df2f502397453868a9a3a708af889
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 21KB
                                • SHA256 13717252078ef398f143e68ecddbf2a7d577eddf5111c4b46ae19ce7dd0796c0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 21KB
                                • SHA256 5e36a2eef96650c190d4055b22ca933dd7ad6c48f7444419725d7c877a3b1479
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 21KB
                                • SHA256 6a62763ff9a86ee4a157680ddb4952203182f0e92a3977eac3494efb042092e4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 21KB
                                • SHA256 68a58d75b4cb3c9627efd35117dedb27283fa9fe09599a038bc777a32e4d9aee
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 22KB
                                • SHA256 807d8bc2a6eb09b633a433b748e0be42ea7b9ffa1e3d72a40e15a1f3f985955e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 13KB
                                • SHA256 0d8cbf19ea0c8807d335d81630c7cefc6e5b9d09c3141100ece554ee2f80e030
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 7KB
                                • SHA256 b6d4d1c6178fbeb18109abf2431cf9dd5dfb907f332b9ede9de52462f21ccc36
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 ac8e8a42616b919cf221bf282dd4a7b3bf6d1107a94168a08844cc52dc804b96
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 733B
                                • SHA256 d9c3e95a35c03c39cfde91ca2a3663c5bca612548eaa88e6e2a42b4d56332d56
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 12KB
                                • SHA256 15624b0f1daf13847f9c6e48d26708d9b5fabfd61d3c01d915100a4474024663
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 16KB
                                • SHA256 f57c876cafcc938b6e1095ecaac2dcfe12214b617808a72caf09af3d90d5a917
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 957B
                                • SHA256 138274d5cb6c8cdb1767d7c08955d8167b540b138fb6021ed08a78688874c0eb
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 1KB
                                • SHA256 0ca24827cbf844d4e697c116ae870469be7c30aa568f39fbc90bd399b11c3680
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 1KB
                                • SHA256 a6e4dacf19e5fb4e92ab2680aaeb14239cebd32ff41f2047a8a2e1334008583f
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 12KB
                                • SHA256 728658e4b05e87de7b23db5b436b34879bf5c94666203c2ff7a76b515f2b0a3b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 1KB
                                • SHA256 1b0cb4dee6fa5b4e44c7758f56e8e4a7da5b745c1b31489ff8c7c48c2cc41437
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 7KB
                                • SHA256 57633639f536ebbe4b8a0ce1588f975dd8a39952ae631f1bcd1de781481a42bc
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 7KB
                                • SHA256 2c9be00d2c0cda179cc5773b426972f2f9d20dfb2867ab04d845c206f11c622e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 33087b7cdfcf891d1a0e51cdd502e875646022ed3f31f21ac81530fa9439f3a8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 cc3e2765245d04542bb0d75151e705f9d6a138ed86aa0c088e8a5863b652292b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 fcf737e615c6c18e34de9026a65cdf1332833d81b3ed53a2dee3dda5bd950791
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 cd27e883506075246765cb191bb522e3636c6e6313d196235069bf6693734c6a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 015b20b8f8b51156ab0ca03042dff4a42bb75a2cf6104177b1c92acadfc1072c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 e0ded69198685ddb7ec2a71cf12490cc7d318382b16ca0dae4387ee41f89d8cd
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 d9751833b46f8b566dc5c57d22b3dd2e4625e67da08deb3562b395ed7975faba
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 a166bc3dd528595561c40af2540f692af67028b0421e5a3916d1ba9df6878848
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 d1d37f2781aa717c1e7c5990a4dc22cb2ae28f91a720ab894285ecd69376bc4e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 11KB
                                • SHA256 fd0ff0ba8ec56b4ec717b696942e6cc8c61eff7bb100eae24d34236ad9d69bbc
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 17KB
                                • SHA256 7aecec86c39971c75019ef550f3b66d7d14040996b95e1e2f625bd9d7b29b804
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 16KB
                                • SHA256 f906910800c8f9dfdf3fcbd6686bdd162504be8f54ae3ced7770fa3498b2592c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 13KB
                                • SHA256 7863fc7840a55213ee5947ebe742d5b2766f3a652fe8203483de059ec0ad1eaa
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 40b7b46936a5eac9b31eab7e21507a2f01393d35a042f56e22f29ed39d7ca233
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 18KB
                                • SHA256 f7aac08458eeb69c2312a501468603e7df99039f42c395e2126702cac6e5fae1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 19KB
                                • SHA256 8aac4f5d6f5a5a200a6dcaafb7aa1578fc1ffa76759d1456e427ef561745b59e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 19KB
                                • SHA256 f3693b6c0b401a7c4bbbde3fbc4eb5845b3ea9403483069048c88c09411c9986
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 13KB
                                • SHA256 4cb9d59ce802eb1e6fb17cb28c228180d1b758615df991940a5845b51b903b18
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 9KB
                                • SHA256 059231968cd7154fe7d840734b89cfb41e42dad090371e92de04ceee81cce4e2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 0ec163365ff8c64932b647c2c55859f0786e9b888a8c18cc8fc8170e42ed315e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 605B
                                • SHA256 4c33b0723ffbab399ad365aeedf724734aeeb494ef66ebfdfbcbc935987ef071
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 909B
                                • SHA256 a907f8f3bd0ebd745c1809faf2b60e2c62f0be2d45534c8c731835108bacec7b
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 17KB
                                • SHA256 c0ba0eaee9e3418d7cf49c98c185a1bd419ced8192dd180797e0d5d03593d2b5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 1KB
                                • SHA256 38ff72eecc6c7e518fb048ded0f096b885de5abd27603ae3233ebae51faac84d
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 13KB
                                • SHA256 0c565ddcac6ce9d06f219762593c4ca135caafd391c3b898c4b3cdb1f35cc7b9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 12KB
                                • SHA256 de52c4d0d7437772ce60d8a1cd49760a0bcd8f07c28319d4638dc568af25bda8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 7KB
                                • SHA256 8c2f8315e9fe77b7b77cbce0865d5615ecf8f30bca4ea68ee559a539cfce93b7
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 5496fca840f5f5db99536dbb2dc76858b8a04eb1331407b89447c88eca6e20ca
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 2ea98007abbbb42290731c77106c48f363bf3f330144959632b8415b899b8204
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 86e6dec661e106623ca5fda08836b4ed2e250158aa743960bd3f153bad0f60e3
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 62fca5231479899cc1f2dcb4a44631c915568cde3ed76b710e2bb626bc826504
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 59181bb413a30313132aec50c811f68dda94f2712cc3b314141e8513ecb8bf4c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 c5723fc2ba96cbcf1f986dcbc682b3bba6af3abf98535c3bfdada97b68c7f7a0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 11KB
                                • SHA256 bbf88d794ce9217d155d4e446ded4394e4c9193b47573e06c43badd227a937f8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 ca2c178757fb82f895d58c3a574fff205c0675ac87864d12bd8e32614a85f88b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 a376a7fe5fb2d83963df9abecca44945a552f83d659c903660e1cfc273040582
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 b632924dab4a2d01dcb229c7a8dec1564dbcf05abcde9cc898fd47b9f4ddb2dd
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 12KB
                                • SHA256 c3cb1cffd680d82ce0c16a6c16616a2a14702da40bb9b652b24058a3887dc802
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 5d2fb1424a1e61dccc68125b2c90c5e055f129bffbd87683bc603ec278d56fb0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 14KB
                                • SHA256 2c056e8f248fabd666f25448c39650ba301863843911a6a5fd39a7904f621d67
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 14KB
                                • SHA256 53f250327db9bc65a1f9cab6fd8019396ec8db0d93373fbd2864c0170b8f5b49
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 17KB
                                • SHA256 150f75a763fda3aace4d76df262ca92a180dbaecf18498f61b30b4a827d46bba
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 19KB
                                • SHA256 154746a13728277fb2dd2b5d04d9d189c644b66bbe3592f46f73031700b2f6b5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 19KB
                                • SHA256 2016a077d93cb8191fb8e2a71937b4ba21acf12ed7525529e25fd95ce2e38071
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 19KB
                                • SHA256 11505b006ae26e9a3a24c25f0047b737f2a5b32683c7373f5444f6fe21bf6db8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 22KB
                                • SHA256 d50ac8048a1156974d0d9a1b02d62a51edf89eecedf1d1609b2856020914a794
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 22KB
                                • SHA256 ad7738449bba69fffc7f7afcbfe34f08b7189013e6baa05d2ff24ff889983d0d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 22KB
                                • SHA256 ff28277afe6d031b98cc29b95c7887471d3c2a529b7b39d73ec5cf5bf79674f0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 22KB
                                • SHA256 fc530e07252e6b6e1057b999208efb0e9def3fb692fd5975031d0f5a75b1cbe2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 14KB
                                • SHA256 1ccc113c2704093ab7cc6d118b53f3b8006c0169b73e7ad7c95f914d9d984452
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 11KB
                                • SHA256 cc3d2964d7017a9204dcc7450fd220646ef4d976361914c96dcebf19f0b935ec
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 d8fa398360251891b57eae59139776b4930dd016866f3209bcf946dc7b00f1bd
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 493B
                                • SHA256 61e81c29c0a926c33b81d87a6de249b8b07810c15048ade5a55ff98ae1edcdde
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 9KB
                                • SHA256 2443ea20026af172199964a8b550457221ec585e1dd879c0b0b33af901819f24
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 9KB
                                • SHA256 766bb50403afee87991c1d909eb81a3bc0971728562d5507018183da42a790d1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 9KB
                                • SHA256 15fd39009affd91b405b26942d8df68cf6593af2cae85201d819bbb1f72115f8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 1KB
                                • SHA256 cb8b689cd1e08a564dd8b25a61f24257ae79f620269774bf46171a809b051a52
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 1KB
                                • SHA256 54fcae51afdcc52749284f508a358c7f07a3c43b5f856e7110a3577051aeba6b
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 0588a308af322cbd0cfa23e1c89726cf61f614077cd4e0df00b5991075518240
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 11KB
                                • SHA256 02b4a792cf8b98d4166eeab2014b16f0baaaf3f78ffc736047897b10fa54b839
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 16KB
                                • SHA256 7c39fc451d170b1bec90baf0511183148c673da4cf70b933c9df039e22a5d0b9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 20KB
                                • SHA256 09152d236f785e73eb8fa14466969ac3ff24a511db18eb341a1c884f1bc7409f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 c21a634f7f16b84910e7d7405cb7fc89bc0e6b87cf35bde7960bee2c7f7d33c2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 8KB
                                • SHA256 1f75f1eca08dc1e72708d04f331e0cf609bf4c2b6724cf9ccbe52f8983cf01b9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 9KB
                                • SHA256 1f83c373dfe55b3b9a146953472d1909ec4f316bf1b4c27c7ad9c8b2e4a1abf2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 9KB
                                • SHA256 eb69c11d06852ea9f282f0f504efcd3ed0de26110a2f3261707f6d814f881e07
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 4b30de96ea7d4167dfaabca4ceed06463db86e77dcb5e13ccb3bf1a74c438a8d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 13KB
                                • SHA256 29e29aa071120ffcf0b8ba5ce6a6ce6d70533b28f82cdeffc6220548d8b2d545
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 12KB
                                • SHA256 6e646c267275b4220f7770409b180db0bce31050a7d31c5396fda5db57647fe7
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 d262e1bf315bcd578cff4d42a2df9d8403b0336c4da13560c8dbca15c4ff5fc1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 16KB
                                • SHA256 61f1504b41cb5ca7753b996f0331a093b6899a5f161b2da15e7c0139c17f8249
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 20KB
                                • SHA256 329cd95e6248a870d99f10e2d0587e41b87fdbe379902bee43c846ee3e14637f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 21KB
                                • SHA256 43736dbd97fb109cec5bf51d64039fb5573b7a4ab99bb1dc4b9ef09fe552c0b0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 d7ce82a447e98b81c366a632eff1643549c4fafa4ec00b87ff91ea555a5ef992
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 d7fd4d520ec798d168b20c90391237a53325d78f80f91e2391b5a801b01fd2bd
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 abbf2cce13ff78b58e5ea30233c4684cafd23a49ecfaca231e5a39a049f9c30f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 7KB
                                • SHA256 d4e6ef5435d41a9c45eb3708fbb99ff119e3cc8dac504797a5106b039ee6ece0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 11KB
                                • SHA256 1e2ccdecf12005cc88be5c941e6433d87151b226b34e81f44ce34d6065dd312d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 11KB
                                • SHA256 eaf6ee12d838bc531fbf9428820ad07455b3e6228acc4f64223fec039fcb6423
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 5cc03e968af56ade7ea7bfdff9ac3f441f220df979a02e0ab7ec8bd5df4998e9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 12f94013c65dc80111f1ea105358a99c202677af1ad0a8e9d28249e6ffaa618e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 1KB
                                • SHA256 4c57852d0b77c9872bdf2a983604348d8fb8eac12eb16418e37b77ae81944f89
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 1KB
                                • SHA256 1e95676b8a59e288259ba04e04ee7eb1b45880083d80ff127f7273e78a50e7d2
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 11KB
                                • SHA256 6060f698525f291fd84bc29b7661ea5205fd0781495613ec03cc5f21fa71ff1e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 14KB
                                • SHA256 809fd536fa991e456a895badcb91add56e9f8c6e7a2bf6676013e06547612532
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 e12246c52a37be6d6dd34db4932ffb1a3e2519a2a093ed5ce6e1627588ccc8c4
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 867ff27498fb6ee3041ece00aae828f4f82cc99ba38cd010b8b4957ce293a8e2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 16KB
                                • SHA256 0d9d1fa3ca8a0933d9c6a74391018ceb47706b30d7c1e754691a539168f8e376
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 c78f55c84466c153e0e82649e41bfdc644833d35f82356c84948110984a715e3
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 9KB
                                • SHA256 51e8bb7aa8ee03c835ce15766a1a8e287d47f0d00f62edbbf9bb920ca5a84777
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 10KB
                                • SHA256 88e0b11aefa92cf0c6eaecb449fc6b477bbdfec2dd75cc77fd6e0572b8fc830d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 14KB
                                • SHA256 472f6729b7c93dee90f80e91cb8f29eab63bf119d4e7717346f4add1a77c8184
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 81ec4fcb898f445e1cf81896f9b83088d3b30dbc148c8e541ac48646eaaf0303
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 e852b0d4c1b09c0acca2f48709df592add5f8dc0b358edde29cefc439139a76d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 16KB
                                • SHA256 38dd79672ce09f1cb709aed11a71dbaeaf31e6b7b6ddac2fdd83b94f52a79aec
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 b3c59e335923f0ba342e24cf44b5cae34b065f2ccc84bae42f7698e5ee87b5b2
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 16KB
                                • SHA256 6da4ff7e0089ee0e01c06c1b7ce909d099db727fafb376d2f25005351bed0223
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 22KB
                                • SHA256 989c3a60500d32d0f6e765e2aedafe2eb941eb01b37d3118e0430a6c2c42069d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 8de9dc82de934fa9c107cc2c2f9104eaf340948d62a4e19423389c14a2004292
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 312b067859a607694be42a66208df1a82d0d66ef166108f4e502d551e13499d0
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 13KB
                                • SHA256 d5773425b33c4e5727cfc349d94bfb4255b8725778b390b1f34f47673bab1a1e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 16KB
                                • SHA256 b01099426581361a7d8d5c3f30113fe753c7f9b86800cefa608563bb26a5a7f5
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 9970d20d12d96d996aaab443a7bbe588fcf50151ba23c6d67a734e02dae00b39
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 1KB
                                • SHA256 561b90f75dfa93b14e95cb494fb060017eed69a64a93f30ba91ea40f46facd31
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 b1beb2f74376513e2ee8a110252fe9d61d5d637b31a4bf8f1cde177eb0182226
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 22KB
                                • SHA256 8ce6669b91f315613900af6f0733dda917fc115aeb421012a02dfbb913a0ba02
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 ce85a6030d9cd0bd95fdf08273ef2e2aeca30a455f285162b9b255cc1d49224a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 6ac6b62b56edc7be529d64a1e59db26cc68fdbdcb98e6f9913ba8b82cee7a292
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 22KB
                                • SHA256 fb46b4644ffe6a9462aa21747e4f367cc804840dfc0ede09bd1f5d2f4733d0fc
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 dec21ce61b8fce226ad113d4c7ddbd2687ebcc038e764195c47d8501b2a07028
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 9KB
                                • SHA256 8eea62066bfdde3740826d45a2d77bf399951844b42c7c1ae9fa964c5f26bd49
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 c7241769f75cacf64bb4c0d21b869bb57026a22905d985f3b481b3d3d8ad8e97
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 17KB
                                • SHA256 fe2203a326c614083dde0078338ab4ffed0adc3fec9973d1af539cbc7b47c976
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 1KB
                                • SHA256 321bb6fa1e3af8f438b52569b917c8675d6d468ded6699d4dd328816f5857c21
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 15KB
                                • SHA256 b9c4c128b5e1a2a3e21af97470cce7533a2b12bb66f27cc8ae8da4e894227e03
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_88fe87a6-2a1a-4875-9d28-a67d95a0be2f.raw
                                • Size 22KB
                                • SHA256 b3a0d496d2d0f32bfe0e30fac07a3b8b70adf69b0cc8c82ed501f2ae878eb37a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                session_a70150ef-d433-4418-be25-2ba42db03a21.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a70150ef-d433-4418-be25-2ba42db03a21.raw
                                • Size 637B
                                • SHA256 bf0c6db42550c34786276b9154bbbde79d2cbaebb0cd43ec825727ca40b38bcd
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_a70150ef-d433-4418-be25-2ba42db03a21.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a70150ef-d433-4418-be25-2ba42db03a21.raw
                                • Size 605B
                                • SHA256 8949419c5c82dd6b10aa46fe0f0a6fdea2cc7e6116bd148f28af5ef52dd9293f
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_a70150ef-d433-4418-be25-2ba42db03a21.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a70150ef-d433-4418-be25-2ba42db03a21.raw
                                • Size 637B
                                • SHA256 54231dc5060d01effa8317568f0f7a5387f8d6ca132e3f0caf08c70de0d700df
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_a70150ef-d433-4418-be25-2ba42db03a21.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a70150ef-d433-4418-be25-2ba42db03a21.raw
                                • Size 637B
                                • SHA256 d056218675995f6608a8caf4651d728d40722d0ba02c0a1a87dee7467d9a63df
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_a70150ef-d433-4418-be25-2ba42db03a21.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a70150ef-d433-4418-be25-2ba42db03a21.raw
                                • Size 493B
                                • SHA256 a2c8c4f751ef76129cfc1a8258b5e75633789cd6d5c971ba97babe13690e6735
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_a70150ef-d433-4418-be25-2ba42db03a21.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a70150ef-d433-4418-be25-2ba42db03a21.raw
                                • Size 829B
                                • SHA256 22ee35e1e75b8d45f5f6eca0680de862579c3daf7ba95b609e7e59faa1d5b1e3
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_a70150ef-d433-4418-be25-2ba42db03a21.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_a70150ef-d433-4418-be25-2ba42db03a21.raw
                                • Size 797B
                                • SHA256 dab481d7080f14850ec0f9fac37dc607967f83fb36a85b181cd5e484059e5bbe
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Size 493B
                                • SHA256 35d7702417c3f1513d2e3bc88c81c4c9a1b65e8dec965eff38aee0f969ed7c0e
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Size 925B
                                • SHA256 c1bd3d8a6b1dd0ba8b17d5c9f65ac5b2f09dddb53b1d26b7c0ca53f1ce30ef2c
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Size 941B
                                • SHA256 1b50823debf28455b64b6724eca2c3671c6db3b7313fb3b08155e93a1fa6db00
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Size 957B
                                • SHA256 65e594bdfb66b60ede1c70a2607edb74f243c89b04fb8e6194ac24e6d2fbe75d
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Size 605B
                                • SHA256 843edd0766609d0d9aa6e535a1309a68da479a478cf036264ce1319de5b0310a
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Size 957B
                                • SHA256 ea520befd23a68a01f0b88a6e5523fa94201edfee70b5ac0be96e5cfad345162
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Size 1KB
                                • SHA256 542dbd9737b3ce573ca58535906e95115f85c265c97afac70a597bae3a5f76ca
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Size 1KB
                                • SHA256 14d98d0b9f43c16a60ed916a3ae2a0e6e5186f95f35408942393aafefe4b0c32
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_f5a944bd-c6e5-47f3-8d18-e12234901b2f.raw
                                • Size 1KB
                                • SHA256 cf0e5469e083f08ec0dda3b893bc963b72fc263fe52ba78151e8f9d0cae1aeaf
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                a44ad65b-1501-4d68-86e7-1c49b539eb04.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\a44ad65b-1501-4d68-86e7-1c49b539eb04.tmp
                                • Size 6B
                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                • MD5 SHA1 SHA512
                                Submit Download

                                a5966882-4512-4526-bea3-a85ac662ca11.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\a5966882-4512-4526-bea3-a85ac662ca11.tmp
                                • Size 2B
                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                • MD5 SHA1 SHA512
                                Submit Download

                                d8773586-4dac-479b-9a7e-7a616dfb38f7.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\d8773586-4dac-479b-9a7e-7a616dfb38f7.tmp
                                • Size 173B
                                • SHA256 a90911620528571781cebd99753954328349890112880738546607049055a922
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                dbcbe5f8-6f6c-42e9-86df-e1cd437cbf7f.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\dbcbe5f8-6f6c-42e9-86df-e1cd437cbf7f.tmp
                                • Size 203B
                                • SHA256 31a531cfa3e14f5ac07af9c81dbf50b34a0bdffe77b62b4e62e7cb51dac5be46
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                edcc4964-a987-431b-a344-b9471e8b2f07.tmp
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\edcc4964-a987-431b-a344-b9471e8b2f07.tmp
                                • Size 10KB
                                • SHA256 0599be7384b22b8ef2e01a180172ccf4511112eed57ddfff17eb6c158e126b82
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp5784.0.1874702036
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5784.0.1874702036
                                • Size 266B
                                • SHA256 f9429eb24613e8402defe8a1516147f9663d82c49f9ddc66de6dbed01f2a3c17
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp5784.0.1874702036
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5784.0.1874702036
                                • Size 1KB
                                • SHA256 01ee1a627e1e74776c6b825fd7db98ffb0bcaab9044bfd60a48fc0b7cafd8116
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp5784.0.1874702036
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp5784.0.1874702036
                                • Size 2KB
                                • SHA256 7196bba1ed40246866f4a798075b7d6fcb8492cd13dde2ea059854201e8be6d8
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 1KB
                                • SHA256 87461106dced33fb3b0f2eb6a99652a57721211d1414af2ff68624dde39438c9
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 4KB
                                • SHA256 babed1bfc266365eb0b4dcf83585fb663e08f773b562260f9962debfc606993c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 4KB
                                • SHA256 179edcdf5c527f18e220ac152ed0443910fa6cfea838e1b6b6c344df83b1a003
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 824B
                                • SHA256 34116508a0e3cc2510fe21cb889c89729fbc462a79aadf10e7d2153bcd99cd85
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 918B
                                • SHA256 a57b4c7d2beff2a7233aa5f0acba2593670987ee01b19402993d9bdaca3fc5ec
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 1KB
                                • SHA256 9128be6bec4beff32342bdb8e247acf49f707a8540a72832deb4834e72d69c0c
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 1KB
                                • SHA256 59a25bf65d7bc1d76665bb3d679a9cd0878a89b3725e0483af029ac835102c2b
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 1KB
                                • SHA256 4cb8ddf4850f1bfc9dd3a55ce7b4f8d863ac33ed6a9a2b97f4107e0e26623b39
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 1KB
                                • SHA256 3401fdc2e73fa2cc05e1f9c9827a19c3cfd248dc84e0c00bb8e03a7b19019f5d
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 2KB
                                • SHA256 82fb88704019a59b65f2d91b7e92b669ff27cbab2477bf628818abf80717187a
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 1014B
                                • SHA256 6b4b9c92e79372e2101ad5eb27935134c1b4f0727b57528ec300b7ab9289888c
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 4KB
                                • SHA256 fe7a313c7ffebca90c1e8aaa5784b4e1d7dfdb58492f5b83dc2a02f7a8875877
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 1KB
                                • SHA256 0638b92a813d09c1bc78d71ae93e00e5b2f1abda0985ce7c9975d3f51efcda1c
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 1KB
                                • SHA256 5fbfcba9bae4fa937758277b0ddaba8431bd0d79ef2791566b76c3f7ceb2e38e
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 549B
                                • SHA256 e6c07df31065e09167cfca21785a23d7f61da1d7aafd9fa45aae5b3f3df83ce0
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 737B
                                • SHA256 6f493a63e1b4c5117693e93a5e148e2f06f508afe20a6f1b58d964383ca3609c
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 4KB
                                • SHA256 e46f0711a34e6944ed0371ed2e62252de8987d89d4664f113772514355cabfa1
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 4KB
                                • SHA256 90d687bfbe0509766a33d3f9cf3be93f715f47e44a4a3aac4d8fdc45d159c393
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 647B
                                • SHA256 cf4a7377347fe6905c072dab5fd0eacaf4c7720a103cca78030dd5b575aa764d
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 4KB
                                • SHA256 2975058288d36b210118914ec2fed9e532b0e9de5510107b282f3b5c390d595d
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 4KB
                                • SHA256 92ff2ddd9f55324903b5f3c7834fdb62fd80edcfa1804c78791ab67bb1a56d6a
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp6140.0.1510566067
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.0.1510566067
                                • Size 4KB
                                • SHA256 550babf05afe02c5ba96d1c1128118aa176f7447f6a9506ded36c87e64f9afeb
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 1015B
                                • SHA256 c87bb6d3c88afe43cba99e8decd414326c0a4860f1d0f77d1d9cbe0db32471a0
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 825B
                                • SHA256 8eb78c4396ba68cfccfcedd42bccaf4c20e7afb7ec3189532817ac80296a4ad4
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 919B
                                • SHA256 b6b96d3a0ca8195893e16855b865dbf6282da53d2a14fd96d5f9108153874969
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 4KB
                                • SHA256 598121d04baee78dc7ba3a2e39a748fac9ed7ea572b0e299ab43fefc0e9c0559
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 4KB
                                • SHA256 95f96cb88a6b09728f6f2ecfc889f733ad0fdb0713d0774401eebca9a2a451de
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 4KB
                                • SHA256 f6f2f68470bcb7a8df8cef279b050c4bf1c497a06395ab05e58307360ae0215e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 5KB
                                • SHA256 7e0241a177d2b42af8ee2ef9e75faac687cd9b115555b6302461713b471dae9f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 200B
                                • SHA256 cdb4d853b153a7432b17980fdedc094ba064183d46b2f959a18373eb2dfd97f0
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 4KB
                                • SHA256 4585f26dea51e4a113b2732f00428eb6e151fa6d8da7d2207462a8553be14537
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 2KB
                                • SHA256 f68d2c0807cefd3d3e4509414832477ec01f4be97a0aa97bf4a28d5f23e09159
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 550B
                                • SHA256 0e290f84b251565a124bafbebcdd0816d038de984651abaefc3a3e6533bc03c6
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 738B
                                • SHA256 7ece3f1744cbab656d0c2ae8689b2be8a2706b11317bcc78808c568e005be300
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 1KB
                                • SHA256 407214baf2b093d89fcaf10799d001b8fbe274566f47de086228fec5e91918b8
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 1KB
                                • SHA256 ad79049b79efc4de7fdf5145f50a332f9c2ab9d50b9dc377e88703f33877047a
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 4KB
                                • SHA256 22cab7f36f1e20b053570ffa100d2c353ef8978548a63fe6125074b2692e7069
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 1KB
                                • SHA256 d4d90961b2e52beaad36ed1c7bb64eacaa24e5a948f5c7833c267fae8d043f8f
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 4KB
                                • SHA256 a4a6d04c5e1240eaf3ffe18654c788ee33d262a3beadca87e717cfe0a0aee387
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 457B
                                • SHA256 98fabf143aec30299951e7fb877539769ce09b8a80dcff814990bb2f65b40861
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 1KB
                                • SHA256 39122ac12701bf37ae66bc501da8b3e9508c638ccce57de55e5851937f71dd7e
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 1KB
                                • SHA256 2e48e64edf998d4904f4378d50064f5719282fc72e33d5930f160af65cda932e
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 1KB
                                • SHA256 3746949a4cc329ec3d28b3fb8b70da944ccfb8eb4e40b26673e2ae09218b15a3
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 648B
                                • SHA256 7d8c35b379ea58063624ccf62bde9c90d1cf784e535b9e57577590b3c2c56fe4
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp6140.1.475369321
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.1.475369321
                                • Size 4KB
                                • SHA256 c1a993db67e42de025a119605fe3e33dc16aa453906edbb39f2ef4e919a40d94
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ssdfp6140.2.929489375
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6140.2.929489375
                                • Size 217B
                                • SHA256 b1ad08caba32c95b90b1f6adfbfa92cce8b751a1a602d1db73686b858e49966e
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp7112.0.1325810122
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1325810122
                                • Size 2KB
                                • SHA256 708d99c46de2230c69ae01e323af660352aad8aaa126ec781eb029e6465663df
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp7112.0.1325810122
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1325810122
                                • Size 266B
                                • SHA256 3f9fe5d472be247ddc631bc2e38f3f768dfe610199bd45c06f29603adfe75dd6
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                ssdfp7112.0.1325810122
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7112.0.1325810122
                                • Size 1KB
                                • SHA256 b580539f62295a06ea9aab0eb3479513bdbffded858eaa80817858a0114796dd
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Local State
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                • Size 2KB
                                • SHA256 8e378893a00e7b71e7f4390771a50e80db30e697aebecfd48a575d5afa5946d1
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Local State
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                • Size 5KB
                                • SHA256 956566fe15c16b5e7be8987e3cab438ab04e18f865682b43763bcfdfa9e07d33
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Local State
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                • Size 5KB
                                • SHA256 ac864ee08f1559bca9d881551ea03df0c0fbc45c6c80f79a4b0d4c02b96c263e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Local State
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                • Size 3KB
                                • SHA256 2671ca504536f31499ad05e069a9ddd5caed094b94ca0222c85df4bcace0ecaf
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Local State
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                • Size 4KB
                                • SHA256 abf608a74440548c511eac8716f31c4b5c97a77ca81c9b6e57ac0f750f81a8b8
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Local State
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                • Size 5KB
                                • SHA256 4ae886a921b1ab7b6f233184e0e9c97660ceee08dfe437c4ddd0fbd00e55756f
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                assistant_prefs.json
                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                • Size 151B
                                • SHA256 737233888aaafdf4c7ece92591cd86c47ac12bbdbd29c3cf85877192b163fb1a
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                AssertDebug.mp3
                                • Path C:\Users\Admin\Desktop\AssertDebug.mp3
                                • Size 795KB
                                • SHA256 cd7961c9426a6da251b84cb2fbeeb8883968c0cede28c0846aa8123c79d7fa58
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                CheckpointOpen.svgz
                                • Path C:\Users\Admin\Desktop\CheckpointOpen.svgz
                                • Size 817KB
                                • SHA256 43a71143dc0a4a369086a7b7dc86e7837a6979da5050265bb35c665d90644030
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                CompressUndo.mhtml
                                • Path C:\Users\Admin\Desktop\CompressUndo.mhtml
                                • Size 636KB
                                • SHA256 4b9655aa6d73ab57d2011c8d2445bf70824fae31e9cc80d7b772d88fe38c3f11
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                DismountPush.mpeg2
                                • Path C:\Users\Admin\Desktop\DismountPush.mpeg2
                                • Size 363KB
                                • SHA256 12aeeee0cbd7c8b5d41eed8bae276a98963abe65cd7c54a1fa346ca3d30e67b9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                EditOpen.reg
                                • Path C:\Users\Admin\Desktop\EditOpen.reg
                                • Size 613KB
                                • SHA256 e2969f84e69764e3eaa6b00d735ee4a19bb5436ff87ef2e37778c6fc22e7fafe
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ExportInstall.xps
                                • Path C:\Users\Admin\Desktop\ExportInstall.xps
                                • Size 840KB
                                • SHA256 3155207081acb95267b0cf0f81cbc09c324c45ded937323fbda7937825f53b1e
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                GetMount.vdw
                                • Path C:\Users\Admin\Desktop\GetMount.vdw
                                • Size 295KB
                                • SHA256 5d114a91746d76a69543d43e70318ac431ef696a5513f003bdafa237d394fb9c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                GrantUnlock.wmv
                                • Path C:\Users\Admin\Desktop\GrantUnlock.wmv
                                • Size 545KB
                                • SHA256 505efb47b2a7127111db1e11a31845e9cef4f05954f353cb8c8177021886e018
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                GroupCopy.gif
                                • Path C:\Users\Admin\Desktop\GroupCopy.gif
                                • Size 681KB
                                • SHA256 e11717c57cd2f40526ace35295cb2d776df2289ce9fdb507dfd50792e6add7bf
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                GroupSplit.rm
                                • Path C:\Users\Admin\Desktop\GroupSplit.rm
                                • Size 454KB
                                • SHA256 dfc6b7387f87540f13c148e11a903e4d4d187b893fd5371aaad3c679c908ac20
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                MeasureSync.ico
                                • Path C:\Users\Admin\Desktop\MeasureSync.ico
                                • Size 477KB
                                • SHA256 a5387bfff122b0a7f4c6d04dae5f5344da5192fc2ccd8a1df4ac05b97b9837b9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                MoveTrace.dot
                                • Path C:\Users\Admin\Desktop\MoveTrace.dot
                                • Size 386KB
                                • SHA256 4a0806093505bcdbd6e2cff8095e2f9d7b46d6f5c7ca483f05faa070d4364fb7
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ProtectPop.potx
                                • Path C:\Users\Admin\Desktop\ProtectPop.potx
                                • Size 590KB
                                • SHA256 df8616c7b24e24a9211e15cd9ce99ca0881f68dd6e1647978b14e55bd67aa911
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                PushResize.docx
                                • Path C:\Users\Admin\Desktop\PushResize.docx
                                • Size 15KB
                                • SHA256 330e8d5dc55f5e8980ae67f1e0727ae83d8575165e4c26d7926ed3f4f4b73482
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                ReceiveClear.au3
                                • Path C:\Users\Admin\Desktop\ReceiveClear.au3
                                • Size 658KB
                                • SHA256 cb5f2bfec6fd73cb0b5bbda0739cc163d0409da1405850a25e3800737ca25c42
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RegisterBlock.tif
                                • Path C:\Users\Admin\Desktop\RegisterBlock.tif
                                • Size 1.1MB
                                • SHA256 b700648b279bf80ac09b8871c1846e2b3daf17d60611acf2f9bbf5f5538b6587
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RemovePing.crw
                                • Path C:\Users\Admin\Desktop\RemovePing.crw
                                • Size 727KB
                                • SHA256 9ae6e15e1187c8419b50c5d21b0aad2ace1b13efd38aa507e19c0fe6d769eb05
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                RevokeSelect.xlsx
                                • Path C:\Users\Admin\Desktop\RevokeSelect.xlsx
                                • Size 499KB
                                • SHA256 7297afa53392be23b7ca18f898e397b1879f88d16adb4503573ad51312672323
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SelectEnter.xlsx
                                • Path C:\Users\Admin\Desktop\SelectEnter.xlsx
                                • Size 11KB
                                • SHA256 b8d24ba2c78d43affb73a671efb856bc38a059a32a80c15997a4efef35468a50
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SelectJoin.zip
                                • Path C:\Users\Admin\Desktop\SelectJoin.zip
                                • Size 522KB
                                • SHA256 ee839d432a6f5690cfccb0ac8fb737d69f6b83303792d9c16cefdd85f03a6394
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                StartUnblock.vsw
                                • Path C:\Users\Admin\Desktop\StartUnblock.vsw
                                • Size 704KB
                                • SHA256 70ace659f137001fb390c1005dccde1492c45e354e835998caf47e845be06b6b
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                StartUse.au3
                                • Path C:\Users\Admin\Desktop\StartUse.au3
                                • Size 318KB
                                • SHA256 fbfa27c212d713182b82f45b8112d274e78bb85e492dd0ce42cde9025853c313
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                StepBlock.png
                                • Path C:\Users\Admin\Desktop\StepBlock.png
                                • Size 749KB
                                • SHA256 5066025789a1af6682834c8e5fb71c926cc4ec9c976c4b21b333b39297ce29ff
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                StepNew.mpp
                                • Path C:\Users\Admin\Desktop\StepNew.mpp
                                • Size 340KB
                                • SHA256 7721da8f8166fb125ab72c19c28d8270c0953afddef56cb40e42724bc573d234
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                StopAdd.dib
                                • Path C:\Users\Admin\Desktop\StopAdd.dib
                                • Size 772KB
                                • SHA256 2f2df98925b70d563217eed7cc0203e43e8f57c6549c3f6ef0ad0dbfe415dbb3
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                SyncRequest.mpa
                                • Path C:\Users\Admin\Desktop\SyncRequest.mpa
                                • Size 431KB
                                • SHA256 a37b78ec737f67706aa8c83f5f7297044ac3076ec714827b643fd712b858c0ec
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                TestMerge.mpg
                                • Path C:\Users\Admin\Desktop\TestMerge.mpg
                                • Size 408KB
                                • SHA256 627760719af238e66d5b1c64b51a71f7820021c47825523acbfaa17dfe6c90e9
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                UnblockHide.M2TS
                                • Path C:\Users\Admin\Desktop\UnblockHide.M2TS
                                • Size 568KB
                                • SHA256 c7493c456c56a9e8d65e5c7ae66724cc9370f6e83f5df197eb8b559c821c281c
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                Acrobat Reader DC.lnk
                                • Path C:\Users\Public\Desktop\Acrobat Reader DC.lnk
                                • Size 2KB
                                • SHA256 6d2350ddad0d7b1dd1f8b08a86a346ac7f1caef9cabbc5947662c96c0ea0d277
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Firefox.lnk
                                • Path C:\Users\Public\Desktop\Firefox.lnk
                                • Size 1KB
                                • SHA256 0b0caad0e9ee5a0c7d06588126fd7cd143453fe4bdc638096fb0950eaee0fe78
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                Google Chrome.lnk
                                • Path C:\Users\Public\Desktop\Google Chrome.lnk
                                • Size 2KB
                                • SHA256 847083e158372ec739755f51c771dea31400975ded618bb8437951ddfbb4f106
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                VLC media player.lnk
                                • Path C:\Users\Public\Desktop\VLC media player.lnk
                                • Size 923B
                                • SHA256 7a6773355527c0b4e51387521fc8d06517cb25880921aa59db3f04128a98f765
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                opera-one-dark.jpg
                                • Path C:\Windows\SystemTemp\scoped_dir6140_1659041929\opera-one-dark.jpg
                                • Size 349KB
                                • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                persona.ini
                                • Path C:\Windows\SystemTemp\scoped_dir6140_1659041929\persona.ini
                                • Size 217B
                                • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                opera-one.jpg
                                • Path C:\Windows\SystemTemp\scoped_dir6140_459140222\opera-one.jpg
                                • Size 194KB
                                • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                Submit Download

                                persona.ini
                                • Path C:\Windows\SystemTemp\scoped_dir6140_459140222\persona.ini
                                • Size 207B
                                • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                • MD5 SHA1 SHA512 TLSH
                                Submit Download

                                memory/5980-1267-0x0000014F6F530000-0x0000014F70DB4000-memory.dmp
                                Download

                                memory/6108-458-0x00007FFEC7A80000-0x00007FFEC7A81000-memory.dmp
                                Download

                                memory/6108-459-0x00007FFEC85B0000-0x00007FFEC85B1000-memory.dmp
                                Download

                                memory/6200-1849-0x0000029826EC0000-0x0000029828744000-memory.dmp
                                Download

                                memory/6436-3095-0x00000241B2D40000-0x00000241B45C4000-memory.dmp
                                Download

                                memory/6436-2794-0x00000241B2D40000-0x00000241B45C4000-memory.dmp
                                Download

                                memory/6436-4076-0x00000241B2D40000-0x00000241B45C4000-memory.dmp
                                Download

                                memory/7204-3912-0x0000019092560000-0x0000019092561000-memory.dmp
                                Download

                                memory/7204-3913-0x0000019092560000-0x0000019092561000-memory.dmp
                                Download

                                memory/7204-3906-0x0000019092560000-0x0000019092561000-memory.dmp
                                Download

                                memory/7204-3917-0x0000019092560000-0x0000019092561000-memory.dmp
                                Download

                                memory/7204-3908-0x0000019092560000-0x0000019092561000-memory.dmp
                                Download

                                memory/7204-3914-0x0000019092560000-0x0000019092561000-memory.dmp
                                Download

                                memory/7204-3916-0x0000019092560000-0x0000019092561000-memory.dmp
                                Download

                                memory/7204-3919-0x0000019090460000-0x0000019091CE4000-memory.dmp
                                Download

                                memory/7204-3907-0x0000019092560000-0x0000019092561000-memory.dmp
                                Download

                                memory/7204-3915-0x0000019092560000-0x0000019092561000-memory.dmp
                                Download

                                memory/7204-3918-0x0000019092560000-0x0000019092561000-memory.dmp
                                Download