Analysis

  • user interaction
    yes
  • max time kernel
    389s
  • max time network
    388s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    28/06/2026, 01:20

General

  • Target
    OperaInstaller (7).exe
  • Size 178KB
  • Sample260628-bqeqdaex71
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 4 IoCs
  • Downloads MZ/PE file 2 IoCs
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks computer location settings 2 TTPs 33 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • System Location Discovery: System Language Discovery 1 TTPs 14 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 64 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • System Time Discovery 1 TTPs 3 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 7 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
  • Modifies registry class 51 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 29 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 14 IoCs
  • Suspicious use of SetWindowsHookEx 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\OperaInstaller (7).exe
    "C:\Users\Admin\AppData\Local\Temp\OperaInstaller (7).exe"
    1⤵
    • Downloads MZ/PE file
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2728
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1580
      • C:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Downloads MZ/PE file
        • Enumerates connected drives
        • Executes dropped EXE
        • Enumerates system info in registry
        • Modifies system certificate store
        • Suspicious use of WriteProcessMemory
        PID:1960
        • C:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x28c,0x290,0x294,0x268,0x2a0,0x7ff615e74e08,0x7ff615e74e14,0x7ff615e74e20
          4⤵
          • Executes dropped EXE
          PID:2900
        • C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:1496
        • C:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=1960 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_20260628022056" --session-guid=b08f0c37-ef7b-4ca4-84d6-801941169ba1 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=7008000000000000
          4⤵
          • Enumerates connected drives
          • Executes dropped EXE
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:212
          • C:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x288,0x298,0x29c,0x264,0x2a0,0x7ff615e74e08,0x7ff615e74e14,0x7ff615e74e20
            5⤵
            • Executes dropped EXE
            PID:2008
          • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe" --backend --initial-pid=1960 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=1 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561" --session-guid=b08f0c37-ef7b-4ca4-84d6-801941169ba1 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=132.0.5905.102
            5⤵
            • Enumerates connected drives
            • Executes dropped EXE
            • Modifies registry class
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            • Suspicious use of WriteProcessMemory
            PID:4872
            • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x298,0x29c,0x2a0,0x270,0x2a8,0x7ff75b684e08,0x7ff75b684e14,0x7ff75b684e20
              6⤵
              • Executes dropped EXE
              PID:4796
            • C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Adds Run key to start application
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:2172
              • C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x1284040,0x128404c,0x1284058
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:4632
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:4356
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x4b4040,0x4b404c,0x4b4058
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:4404
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:3008
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:5052
                    • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db90
                      10⤵
                      • Executes dropped EXE
                      PID:4348
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:4316
                    • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db90
                      10⤵
                      • Executes dropped EXE
                      PID:1344
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x294,0x298,0x29c,0x270,0x2a0,0xa0c830,0xa0c83c,0xa0c848
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:4784
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:3340
                      • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db90
                        11⤵
                        • Executes dropped EXE
                        PID:3116
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:4904
                      • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x20c,0x25c,0x260,0x208,0x264,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db90
                        11⤵
                        • Executes dropped EXE
                        PID:1296
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:5240
                      • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db90
                        11⤵
                        • Executes dropped EXE
                        PID:5300
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Adds Run key to start application
              • Checks computer location settings
              • Drops file in Program Files directory
              • Executes dropped EXE
              • Loads dropped DLL
              • Checks processor information in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:4036
              • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x258,0x25c,0x260,0x254,0x264,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db90
                7⤵
                • Executes dropped EXE
                PID:4736
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1716,i,591902649835301236,9105539080941014027,262144 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1904 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5320
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2008,i,3101204459007502342,17369020176472830985,524288 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2176 /prefetch:3
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                • Enumerates system info in registry
                PID:5356
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2360,i,3988671325233465191,7870202031366857538,524288 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2200 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:5540
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3656,i,7746736618106645153,6786358530865358668,2097152 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3724 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:5992
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=3084,i,16009167547584283589,15190593770176169298,2097152 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4124 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:5548
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4464,i,18145830519281116874,2319114950560999554,524288 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3192 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:5848
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4584,i,4984167184880386172,3146941542241968647,2097152 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4608 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:5644
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4904,i,12794702445505404288,13935408891183580574,524288 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4916 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5624
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4128,i,4436235663142221183,2521497087499094572,524288 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3088 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:5732
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3188,i,13397872245579596349,10315300552972960946,524288 --field-trial-handle=1908,i,4652802676429489811,6614566632120923240,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1920,i,9128850260377116512,4305913932523449983,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5124 /prefetch:8
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:6560
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\additional_file2.tmp"
              6⤵
              • Adds Run key to start application
              • Checks computer location settings
              • Drops file in Program Files directory
              • Executes dropped EXE
              • Checks processor information in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of WriteProcessMemory
              PID:6692
              • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db90
                7⤵
                • Executes dropped EXE
                PID:6628
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1820,i,12068214900637139135,16192210450548432347,524288 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2192 /prefetch:3
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • System Time Discovery
                PID:7272
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1684,i,15811066348056000597,14352381349623930562,262144 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2148 /prefetch:2
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:7284
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2336,i,12069609742098925606,2028835217447047563,524288 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2632 /prefetch:8
                7⤵
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:8008
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3468,i,16975361461901834739,11553881723889898719,2097152 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3944 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:7860
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3992,i,13883102630391659870,8546107803828475799,2097152 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4068 /prefetch:2
                7⤵
                • Checks computer location settings
                • Executes dropped EXE
                • Enumerates system info in registry
                PID:7832
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4176,i,6226576002644941822,16236559435029766984,2097152 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4312 /prefetch:2
                7⤵
                • Checks computer location settings
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:7848
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4644,i,2303524701066035899,14501986484597553606,524288 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4656 /prefetch:8
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:7756
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4808,i,4743757484772236528,14715098100258546183,524288 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4632 /prefetch:8
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                • Enumerates system info in registry
                PID:7496
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4940,i,15097123434617754159,7792468557886019470,524288 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4952 /prefetch:8
                7⤵
                • Executes dropped EXE
                PID:7424
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5212,i,13327736818257467857,11262420798696123900,524288 --field-trial-handle=2152,i,3988350138725516131,1873307594976753592,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2156,i,8162450629039273670,8363911328780056428,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4892 /prefetch:8
                7⤵
                • Executes dropped EXE
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:3852
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
              6⤵
              • Adds Run key to start application
              • Checks computer location settings
              • Drops file in Program Files directory
              • Checks processor information in registry
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of WriteProcessMemory
              PID:7748
              • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db90
                7⤵
                  PID:7952
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1924,i,6748851180754090664,11941542345582362243,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2128 /prefetch:3
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • System Time Discovery
                  PID:7512
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1732,i,2498724688818492150,7861420269183760785,262144 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2092 /prefetch:2
                  7⤵
                  • Enumerates system info in registry
                  PID:7500
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2396,i,7431412025753126501,18393258348268243587,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2604 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:6064
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3136,i,17586281364157616510,15312996283096527775,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3240 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:8120
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3148,i,10881680768684541310,2497342265737988939,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3260 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:8128
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3172,i,5917394627113432205,4949492644129631219,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3300 /prefetch:8
                  7⤵
                  • Enumerates system info in registry
                  PID:8136
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3112,i,18226820295964329270,15000305784976485545,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3200 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:6516
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3184,i,8230628497878026288,16214958507944299180,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3320 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:8144
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3124,i,12375790885457465243,3894888232161455753,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3220 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:8156
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3976,i,663809868830561822,16143152171247270591,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3980 /prefetch:1
                  7⤵
                  • Checks computer location settings
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:8184
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3160,i,9936604821275928332,1030107634809329609,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3280 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:6856
                • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_gx_splash.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
                  7⤵
                  • Modifies registry class
                  • Suspicious use of AdjustPrivilegeToken
                  PID:5156
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4660,i,14130627192480683400,13434723157774317687,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4664 /prefetch:2
                  7⤵
                  • Checks computer location settings
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:7244
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4832,i,17409447651682673091,8611971313734810246,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4844 /prefetch:1
                  7⤵
                  • Checks computer location settings
                  • Enumerates system info in registry
                  PID:5736
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5140,i,5190212717993685341,18331949956494651195,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5148 /prefetch:1
                  7⤵
                  • Checks computer location settings
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:5524
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5272,i,4563442440434114995,8896819408932722027,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5296 /prefetch:1
                  7⤵
                  • Checks computer location settings
                  PID:5756
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6324,i,11347833432501459961,14683565707817337116,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6316 /prefetch:2
                  7⤵
                  • Checks computer location settings
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:5168
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6896,i,10180082513374934340,14968149997913103946,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6788 /prefetch:2
                  7⤵
                  • Checks computer location settings
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:7528
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6804,i,13254380588619335313,14059601639344768438,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6860 /prefetch:2
                  7⤵
                  • Checks computer location settings
                  • System Network Configuration Discovery: Internet Connection Discovery
                  PID:7660
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=6696,i,4950825374279765513,12816165967900475503,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6388 /prefetch:8
                  7⤵
                  • Enumerates system info in registry
                  PID:6404
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=7276,i,5920464390145925696,2410075011902800244,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7284 /prefetch:1
                  7⤵
                  • Checks computer location settings
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:7460
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7336,i,6910232951756637586,6159296127823466583,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6668 /prefetch:8
                  7⤵
                  • System Network Configuration Discovery: Internet Connection Discovery
                  • Enumerates system info in registry
                  PID:2392
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7472,i,7564440194087690406,7218013966709334023,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7476 /prefetch:8
                  7⤵
                    PID:4548
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7512,i,16107327602050731198,12214973228349808642,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7716 /prefetch:8
                    7⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:2868
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7848,i,15358371854098023173,8750203497876298852,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7860 /prefetch:8
                    7⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:7812
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7888,i,5673190039478272930,6416577393333115457,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7904 /prefetch:8
                    7⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:8032
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8112,i,12915007650433302551,10783823716131059887,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=8128 /prefetch:8
                    7⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:7600
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8264,i,15243261921400219409,15045428246293369123,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8312 /prefetch:8
                    7⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:7340
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8276,i,5275114334897704502,16235942312771946825,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=8340 /prefetch:8
                    7⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    PID:7980
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8288,i,8680368816136961628,3299013767812137515,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8332 /prefetch:8
                    7⤵
                    • System Network Configuration Discovery: Internet Connection Discovery
                    • Enumerates system info in registry
                    PID:7784
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8300,i,9020090083699949333,9822472825885053528,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8452 /prefetch:8
                    7⤵
                      PID:720
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9256,i,13596945199840244,2771602770221303038,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=9268 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:2324
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=9452,i,8105276402916382870,6670208679403951887,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=9468 /prefetch:2
                      7⤵
                      • Checks computer location settings
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:8072
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7312,i,1169318042098223494,8142677604848199104,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=9644 /prefetch:8
                      7⤵
                      • Enumerates system info in registry
                      PID:8056
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9636,i,1569374744579091005,2446817405917701697,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=9800 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:3852
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9676,i,17786083615821157764,4910979273718185662,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9844 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      • Enumerates system info in registry
                      PID:7908
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9668,i,11138662168781882589,15537340340690401229,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=9820 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:5712
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10184,i,6630400232989257126,17835821488075963187,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=10196 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:7700
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10344,i,15337932121208392930,14903609385111350346,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=10368 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:6544
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9492,i,17541555633965986074,12155862509439763724,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9488 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:1828
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10356,i,8286593733364858830,7234927402062376517,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=10620 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:1700
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10624,i,5768590719855725301,6267450766848202216,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=10648 /prefetch:8
                      7⤵
                      • System Network Configuration Discovery: Internet Connection Discovery
                      PID:7892
                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                      7⤵
                      • Enumerates system info in registry
                      PID:6384
                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x294,0x298,0x29c,0x22c,0x2a0,0x7ff7508d0900,0x7ff7508d090c,0x7ff7508d0918
                        8⤵
                          PID:7624
                      • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe" --fix-taskbar-pins
                        7⤵
                        • Enumerates system info in registry
                        PID:5152
                        • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x298,0x29c,0x2a0,0x278,0x2a4,0x7ff75b684e08,0x7ff75b684e14,0x7ff75b684e20
                          8⤵
                            PID:3724
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10992,i,16979189867541301923,11240579709382662993,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=11004 /prefetch:8
                          7⤵
                          • Enumerates system info in registry
                          PID:5356
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11088,i,12314783400785509096,12723640207908568049,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=11124 /prefetch:8
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          PID:1012
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11144,i,4109410917014310991,1915144969716355271,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=11132 /prefetch:8
                          7⤵
                          • Enumerates system info in registry
                          PID:6752
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --metrics-shmem-handle=11424,i,18337457495259387479,12073015930786094254,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=11484 /prefetch:1
                          7⤵
                          • Checks computer location settings
                          • Enumerates system info in registry
                          PID:6332
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11068,i,11248687024501365191,8457153661757219622,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=11044 /prefetch:8
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          PID:4352
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11304,i,15821112627828055972,7663641463018408263,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=4060 /prefetch:8
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          • Enumerates system info in registry
                          PID:924
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11340,i,4364559571295218745,11276756291535849910,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=11052 /prefetch:8
                          7⤵
                          • System Network Configuration Discovery: Internet Connection Discovery
                          • Enumerates system info in registry
                          PID:6568
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11268,i,15872839941682771711,4723628805073874165,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=11048 /prefetch:8
                          7⤵
                            PID:6840
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10968,i,16334248249940697421,3528011926024787333,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=8032 /prefetch:8
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:7776
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=11300,i,13251001436762211217,7508647075817388442,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=9520 /prefetch:2
                            7⤵
                            • Checks computer location settings
                            • Enumerates system info in registry
                            PID:6424
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=8180,i,17668303552160323828,11347141872983144802,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=8280 /prefetch:2
                            7⤵
                            • Checks computer location settings
                            PID:4492
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=11584,i,17738448310339334997,4846182950240333188,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=11484 /prefetch:1
                            7⤵
                            • Checks computer location settings
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:5924
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=11376,i,12874181833454744334,5018929748708446623,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=8180 /prefetch:2
                            7⤵
                            • Checks computer location settings
                            • Enumerates system info in registry
                            PID:6228
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=7000,i,6879977033512153300,9815058791251225009,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=6792 /prefetch:2
                            7⤵
                            • Checks computer location settings
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:6152
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --metrics-shmem-handle=4512,i,326966416390410318,13651535029737569174,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=4748 /prefetch:1
                            7⤵
                            • Checks computer location settings
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:4488
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=3420,i,16559604378555281337,265322415131928074,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=3492 /prefetch:1
                            7⤵
                            • Checks computer location settings
                            PID:7564
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=9456,i,2903393140714727490,16070217858375971935,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=11388 /prefetch:1
                            7⤵
                            • Checks computer location settings
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:4548
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4288,i,16008482167766994903,5572037037984496647,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=5508 /prefetch:8
                            7⤵
                            • Enumerates system info in registry
                            PID:3192
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7096,i,4037608411637626104,17433832216197247450,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=11376 /prefetch:8
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:3468
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11204,i,1695722676343102287,14990024069163769879,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=804 /prefetch:8
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:6176
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=4244,i,14319108538965242987,10613247262137635671,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=9252 /prefetch:2
                            7⤵
                            • Checks computer location settings
                            • Enumerates system info in registry
                            PID:6268
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4088,i,11685921558116167918,11107982558669912504,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=4008 /prefetch:8
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            • Enumerates system info in registry
                            PID:6852
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=8180,i,17795499899835345158,10911320000519476842,262144 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=10980 /prefetch:8
                            7⤵
                            • Enumerates system info in registry
                            • Suspicious behavior: EnumeratesProcesses
                            PID:8004
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=5620,i,6916139027133119030,814213393601448497,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=10928 /prefetch:8
                            7⤵
                            • System Network Configuration Discovery: Internet Connection Discovery
                            PID:5872
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11260,i,2676569823176033410,14183576379122716444,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=11056 /prefetch:8
                            7⤵
                              PID:1712
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --metrics-shmem-handle=4144,i,6514985958476028860,17520954999264044659,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=3500 /prefetch:2
                              7⤵
                              • Checks computer location settings
                              • System Network Configuration Discovery: Internet Connection Discovery
                              PID:6292
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4108,i,15403298520316614108,18280280968909977763,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=3428 /prefetch:8
                              7⤵
                              • Enumerates system info in registry
                              PID:1760
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7532,i,4447117107357903912,4631502040147234578,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=800 /prefetch:8
                              7⤵
                                PID:5004
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=3480,i,16379244951162222914,993231497341868244,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=11268 /prefetch:2
                                7⤵
                                • Checks computer location settings
                                • System Network Configuration Discovery: Internet Connection Discovery
                                • Enumerates system info in registry
                                PID:7340
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1596,i,3765312405738615340,15658951760800680329,524288 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=4688 /prefetch:8
                                7⤵
                                • System Network Configuration Discovery: Internet Connection Discovery
                                PID:8120
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:continue-shopping-aliexpress-cms-configuration=on --with-feature:continue-shopping-ebay-cms-configuration=on --with-feature:continue-shopping-otto-cms-configuration=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=3416,i,147860665385447343,17768777039615149681,2097152 --field-trial-handle=2096,i,15312485366528009096,7210114753927611715,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=CapitalOneCashbackProtection,SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2100,i,5912087286076398831,7741630600286542967,4 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=9532 /prefetch:2
                                7⤵
                                • Checks computer location settings
                                • System Network Configuration Discovery: Internet Connection Discovery
                                • Enumerates system info in registry
                                PID:6120
                        • C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                          "C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                          4⤵
                          • Executes dropped EXE
                          • System Location Discovery: System Language Discovery
                          PID:4356
                        • C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe
                          "C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe" --version
                          4⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • System Location Discovery: System Language Discovery
                          • Suspicious use of WriteProcessMemory
                          PID:1860
                          • C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe
                            "C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x1284040,0x128404c,0x1284058
                            5⤵
                            • Executes dropped EXE
                            • Loads dropped DLL
                            • System Location Discovery: System Language Discovery
                            PID:2524
                  • C:\Windows\SysWOW64\DllHost.exe
                    C:\Windows\SysWOW64\DllHost.exe /Processid:{60A90A2F-858D-42AF-8929-82BE9D99E8A1}
                    1⤵
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of SetWindowsHookEx
                    PID:720
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    1⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of FindShellTrayWindow
                    • Suspicious use of SendNotifyMessage
                    • Suspicious use of WriteProcessMemory
                    PID:4444
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      2⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:636
                      • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db90
                        3⤵
                        • Executes dropped EXE
                        PID:4440
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      2⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:4936
                      • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db90
                        3⤵
                        • Executes dropped EXE
                        PID:4816
                    • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x26c,0x270,0x274,0x224,0x278,0xa0c830,0xa0c83c,0xa0c848
                      2⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • System Location Discovery: System Language Discovery
                      • Suspicious use of WriteProcessMemory
                      PID:1924
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                        3⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Enumerates system info in registry
                        • Suspicious use of WriteProcessMemory
                        PID:4244
                        • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db90
                          4⤵
                          • Executes dropped EXE
                          PID:4268
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                        3⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Enumerates system info in registry
                        PID:2760
                        • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db90
                          4⤵
                          • Executes dropped EXE
                          PID:5160
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                        3⤵
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Enumerates system info in registry
                        • Suspicious use of WriteProcessMemory
                        PID:5376
                        • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x254,0x258,0x25c,0x250,0x260,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db90
                          4⤵
                          • Executes dropped EXE
                          PID:5504
                  • C:\Windows\system32\wbem\unsecapp.exe
                    C:\Windows\system32\wbem\unsecapp.exe -Embedding
                    1⤵
                      PID:6336
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
                      1⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:6708
                      • C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x250,0x254,0x258,0x24c,0x25c,0x7ffee3b1db70,0x7ffee3b1db80,0x7ffee3b1db90
                        2⤵
                        • Executes dropped EXE
                        PID:6860
                    • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                      1⤵
                        PID:7252
                        • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                          C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=132.0.5905.102 --initial-client-data=0x274,0x278,0x27c,0x210,0x280,0x7ff7508d0900,0x7ff7508d090c,0x7ff7508d0918
                          2⤵
                            PID:8148
                          • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                            "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                            2⤵
                              PID:6060

                          Network

                                MITRE ATT&CK Enterprise v16

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                manifest.json

                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1176730732\manifest.json
                                • Size 72B
                                • SHA256 8541ddcefc17c421e19c9768a70c4772315795eac3268fd8820b0fb4f409720a
                                • MD5 SHA1 SHA512 TLSH

                                hyph-as.hyb

                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-as.hyb
                                • Size 703B
                                • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                • MD5 SHA1 SHA512 TLSH

                                hyph-hi.hyb

                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-hi.hyb
                                • Size 687B
                                • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                • MD5 SHA1 SHA512 TLSH

                                hyph-nb.hyb

                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\hyph-nb.hyb
                                • Size 141KB
                                • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                manifest.json

                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1352180151\manifest.json
                                • Size 82B
                                • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                • MD5 SHA1 SHA512 TLSH

                                manifest.json

                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1414299440\manifest.json
                                • Size 1002B
                                • SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
                                • MD5 SHA1 SHA512 TLSH

                                manifest.json

                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1645256094\manifest.json
                                • Size 73B
                                • SHA256 ca7ea4f835bd9ed0979106a812def5e1867fae42c732690bd0e1877b4c2dd13f
                                • MD5 SHA1 SHA512 TLSH

                                manifest.json

                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_1774652473\manifest.json
                                • Size 95B
                                • SHA256 b99652ef0510a22ae33bfc8c5dcdcd31eaeb08362993cb42d64861bc07169089
                                • MD5 SHA1 SHA512 TLSH

                                manifest.json

                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_2128780404\manifest.json
                                • Size 94B
                                • SHA256 95a2b0748baee70740ff2d5da78f98b5a29950562f989591f0b0b5bf13354b85
                                • MD5 SHA1 SHA512 TLSH

                                manifest.json

                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_341673782\manifest.json
                                • Size 145B
                                • SHA256 6cce5ad8d496bc5179fa84af8afc568eeba980d8a75058c6380b64fb42298c28
                                • MD5 SHA1 SHA512 TLSH

                                manifest.json

                                • Path C:\Program Files\chromium_chrome_Unpacker_BeginUnzipping7748_905606834\manifest.json
                                • Size 202B
                                • SHA256 8bd59f33a6e286c7e7352dfaebc9b03cea4e0e959a8ebb2f04b69bd92e107dc1
                                • MD5 SHA1 SHA512 TLSH

                                opera-one-dark.jpg

                                • Path C:\Program Files\scoped_dir7748_2015393172\opera-one-dark.jpg
                                • Size 349KB
                                • SHA256 70b35d024405f6adfb37715e58cadeefab36e305158a73e8a4cc377bae1a4476
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                persona.ini

                                • Path C:\Program Files\scoped_dir7748_2015393172\persona.ini
                                • Size 217B
                                • SHA256 69feb09a5aa11d2badb4cdf17c2ddf7861a97a1d3a6add0ded22e5e9e07defc5
                                • MD5 SHA1 SHA512 TLSH

                                opera-one.jpg

                                • Path C:\Program Files\scoped_dir7748_876230638\opera-one.jpg
                                • Size 194KB
                                • SHA256 2e8375c8ba1c0f5379de54bf4bcb0af7ae0ef3c2a6af07409c8d007ff0685b71
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                persona.ini

                                • Path C:\Program Files\scoped_dir7748_876230638\persona.ini
                                • Size 207B
                                • SHA256 7cd803353a8af5af891ddf63908e408d1667cfc4b4d2882c61a0fe734df919ec
                                • MD5 SHA1 SHA512 TLSH

                                8B2B9A00839EED1DFDCCC3BFC2F5DF12

                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                • Size 1KB
                                • SHA256 71ccd39de69ec147afd8ad4337a36829dcababbf40897250380c7770de551242
                                • MD5 SHA1 SHA512 TLSH

                                B46811C17859FFB409CF0E904A4AA8F8

                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
                                • Size 528B
                                • SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
                                • MD5 SHA1 SHA512 TLSH

                                E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                • Size 471B
                                • SHA256 558d78fd838f15faa2c4353a2d7c71ba4eaa4432e14ccb6fdb4ef49cc2e97846
                                • MD5 SHA1 SHA512 TLSH

                                8B2B9A00839EED1DFDCCC3BFC2F5DF12

                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                • Size 174B
                                • SHA256 d1e6068e2db3b9d532c0061f356634c8f5f5ba3590eaa58a9d52f1a6a2f66408
                                • MD5 SHA1 SHA512 TLSH

                                B46811C17859FFB409CF0E904A4AA8F8

                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
                                • Size 170B
                                • SHA256 8f5a2c151a5f08defd1d9ada88bb19241bed4844c30a0d6c02dab5202a4fb04e
                                • MD5 SHA1 SHA512 TLSH

                                E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5

                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                • Size 416B
                                • SHA256 1f749aee5ce6ca300116dbdfcde79a362b305ba0c37e14b496404f523ccfb7d4
                                • MD5 SHA1 SHA512 TLSH

                                data_0

                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\data_0
                                • Size 44KB
                                • SHA256 336041697f52daa163b35e3a6c94fb0a2555c4e51df716239482cbb0877e4df4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                f_000001

                                • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                • Size 163KB
                                • SHA256 570566c7f03332ac34cf86e06af443dae4751f498a9284b3d3efbdfbe077b6d0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                132.0.5905.102.manifest

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\132.0.5905.102.manifest
                                • Size 227B
                                • SHA256 3070fbf02a93efa3130659d65b980d8bad2ebcbc3373681a803bfa366e4db2b3
                                • MD5 SHA1 SHA512 TLSH

                                150x150Logo.scale-100.png

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\150x150Logo.scale-100.png
                                • Size 1KB
                                • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                • MD5 SHA1 SHA512 TLSH

                                150x150Logo.scale-100_contrast-white.png

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\150x150Logo.scale-100_contrast-white.png
                                • Size 1KB
                                • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                • MD5 SHA1 SHA512 TLSH

                                150x150Logo.scale-140.png

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\150x150Logo.scale-140.png
                                • Size 1KB
                                • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                • MD5 SHA1 SHA512 TLSH

                                150x150Logo.scale-140_contrast-white.png

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\150x150Logo.scale-140_contrast-white.png
                                • Size 1KB
                                • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                • MD5 SHA1 SHA512 TLSH

                                150x150Logo.scale-180.png

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\150x150Logo.scale-180.png
                                • Size 1KB
                                • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                • MD5 SHA1 SHA512 TLSH

                                150x150Logo.scale-180_contrast-white.png

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\150x150Logo.scale-180_contrast-white.png
                                • Size 1KB
                                • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                • MD5 SHA1 SHA512 TLSH

                                150x150Logo.scale-80.png

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\150x150Logo.scale-80.png
                                • Size 827B
                                • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                • MD5 SHA1 SHA512 TLSH

                                150x150Logo.scale-80_contrast-white.png

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\150x150Logo.scale-80_contrast-white.png
                                • Size 799B
                                • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                • MD5 SHA1 SHA512 TLSH

                                70x70Logo.scale-100.png

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\70x70Logo.scale-100.png
                                • Size 781B
                                • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                • MD5 SHA1 SHA512 TLSH

                                70x70Logo.scale-100_contrast-white.png

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\70x70Logo.scale-100_contrast-white.png
                                • Size 752B
                                • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                • MD5 SHA1 SHA512 TLSH

                                70x70Logo.scale-140.png

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\70x70Logo.scale-140.png
                                • Size 991B
                                • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                • MD5 SHA1 SHA512 TLSH

                                70x70Logo.scale-140_contrast-white.png

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\70x70Logo.scale-140_contrast-white.png
                                • Size 865B
                                • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                • MD5 SHA1 SHA512 TLSH

                                70x70Logo.scale-180.png

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\70x70Logo.scale-180.png
                                • Size 1KB
                                • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                • MD5 SHA1 SHA512 TLSH

                                70x70Logo.scale-180_contrast-white.png

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\70x70Logo.scale-180_contrast-white.png
                                • Size 1KB
                                • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                • MD5 SHA1 SHA512 TLSH

                                70x70Logo.scale-80.png

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\70x70Logo.scale-80.png
                                • Size 590B
                                • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                • MD5 SHA1 SHA512 TLSH

                                70x70Logo.scale-80_contrast-white.png

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\Assets\70x70Logo.scale-80_contrast-white.png
                                • Size 519B
                                • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                • MD5 SHA1 SHA512 TLSH

                                assistant_package

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\assistant_package
                                • Size 3.6MB
                                • SHA256 2a06f65f1e02d4734080d0a4efcb54c0ac18e7e8599a9f17cd7f2883ab9ea53b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                d3dcompiler_47.dll

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\d3dcompiler_47.dll
                                • Size 4.5MB
                                • SHA256 abdb586aa4b6ac26c01f78ea8e8f00d2a8c3cc4292ac5d79bb7a616e2dffd251
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                dxcompiler.dll

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\dxcompiler.dll
                                • Size 24.5MB
                                • SHA256 1b3f4fdcc71a604b3baf7e177803b924395dc794f8caf2875990d9df9b65676d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                dxil.dll

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\dxil.dll
                                • Size 1.5MB
                                • SHA256 41480abe82ab90c751269f69b43e73eb996b60c9075d18bb41d375fe3d420c15
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                files_list

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\files_list
                                • Size 6KB
                                • SHA256 1302d363ddf0c77c294a4b51e17a12705c7512691ec96b3be5aeefa4544f8da2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                headless_command_resources.pak

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\headless_command_resources.pak
                                • Size 2KB
                                • SHA256 b3175eb086ccedcddd282b5847a23687a8a8ee37bf485851efc36a7600a2acfe
                                • MD5 SHA1 SHA512 TLSH

                                icudtl.dat

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\icudtl.dat
                                • Size 10.4MB
                                • SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                installer.exe

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer.exe
                                • Size 8.3MB
                                • SHA256 67f3216dbe076cecc9e8f44dccdcedbd4e1a0131c4f485e5cc31384e3f566f55
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                installer_helper_64.exe

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\installer_helper_64.exe
                                • Size 652KB
                                • SHA256 fe3856bb87a7210843e1c034c5ee97ddfaba373833253dbab279854e2a55e6e1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                libEGL.dll

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\libEGL.dll
                                • Size 502KB
                                • SHA256 f3ae511d55fa143e21a1b1aceb0bd166a91542c94f84d184f3438debb34d7478
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                libGLESv2.dll

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\libGLESv2.dll
                                • Size 7.5MB
                                • SHA256 44487957fbe24a70730727a87949bc60c4755caec58c7a2205f45e13e234b64a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                bg.pak

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\localization\bg.pak
                                • Size 1003KB
                                • SHA256 714c1097aea1961094ed436af43c1a418802c50f8671940731e2b37519f3c403
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                bn.pak

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\localization\bn.pak
                                • Size 1.3MB
                                • SHA256 d64489385fff780a708c05377b108993f97f022d2f6e45b6687406592cc96f62
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ca.pak

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\132.0.5905.102\localization\ca.pak
                                • Size 630KB
                                • SHA256 52898021b433dfc59834a1fd51feed1285fd30525ab19ce72f360038f4d77463
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                installer_prefs.json

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                • Size 1KB
                                • SHA256 108867f6d7fcfb1f3e29cac59190abfddd6c17ac4c50a54aceb7845c5baf85a1
                                • MD5 SHA1 SHA512 TLSH

                                opera.exe

                                • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                • Size 2.9MB
                                • SHA256 e0a97dc8d997226f9032c9903c21f113b3f66680debe47044d071fb5e8adfd9e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Opera Browser.lnk

                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\Opera Browser.lnk
                                • Size 1KB
                                • SHA256 9030a834cec9a4dfb81a6eeb4ce56c304b5de417303d3c354d045326affa578c
                                • MD5 SHA1 SHA512 TLSH

                                additional_file0.tmp

                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\additional_file0.tmp
                                • Size 2.8MB
                                • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                assistant_installer.exe

                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\assistant_installer.exe
                                • Size 2.4MB
                                • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                dbgcore.DLL

                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\dbgcore.DLL
                                • Size 222KB
                                • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                dbghelp.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\assistant\dbghelp.dll
                                • Size 1.8MB
                                • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                installer_prefs_include.json

                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\installer_prefs_include.json
                                • Size 239B
                                • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
                                • MD5 SHA1 SHA512 TLSH

                                installer_prefs_include.json

                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\installer_prefs_include.json
                                • Size 1KB
                                • SHA256 929f2a1b2371ca8564ee3ffabf6021e2868b54227c4641ff36b14ed4ba3c206a
                                • MD5 SHA1 SHA512 TLSH

                                installer_prefs_include.json.backup

                                • Path C:\Users\Admin\AppData\Local\Temp\.opera\0cb89841-019b-4251-bb0b-262595fae44f Opera Installer Temp\opera_package_202606280220561\installer_prefs_include.json.backup
                                • Size 224B
                                • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                                • MD5 SHA1 SHA512 TLSH

                                installer.exe

                                • Path C:\Users\Admin\AppData\Local\Temp\7zSC262A548\installer.exe
                                • Size 8.3MB
                                • SHA256 127384a7702d51649f429b462e28f75344a528eec7aaabb60151912fbb788bfa
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                OpInst.exe

                                • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                • Size 3.1MB
                                • SHA256 ebcb295fcec89a70169ba86e4708613156a09358c4fba995396e21a5d9f54f72
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                b4ff4363-331e-41ef-acb6-572c640ce7a8.tmp

                                • Path C:\Users\Admin\AppData\Local\Temp\b4ff4363-331e-41ef-acb6-572c640ce7a8.tmp
                                • Size 14KB
                                • SHA256 f1d24a67ce5aa49b3a6a207a0c49c636f0a5b4851ce493326c76a0b78eb7c545
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                bg.png

                                • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                • Size 224KB
                                • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                e6fe5f30-0c21-4d38-96dc-63a5f3347f90.tmp

                                • Path C:\Users\Admin\AppData\Local\Temp\e6fe5f30-0c21-4d38-96dc-63a5f3347f90.tmp
                                • Size 2.6MB
                                • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                favicon_opera_one.png

                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4036_581317953\CRX_INSTALL\favicon_opera_one.png
                                • Size 2KB
                                • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                • MD5 SHA1 SHA512 TLSH

                                manifest.json

                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4036_581317953\CRX_INSTALL\manifest.json
                                • Size 3KB
                                • SHA256 49617d3777a26738fb68ba609ed7adc762ee90f8f7602931b03f98cb4f4d5859
                                • MD5 SHA1 SHA512 TLSH

                                service_worker.js

                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4036_581317953\CRX_INSTALL\service_worker.js
                                • Size 65KB
                                • SHA256 d3269c201bbb37070527e852e1f4bb2c4ebcf2977bf47ccbe2ae32923b1abd11
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                de932af914ba00303d4a2778a383ac9c831101e2.crx

                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4036_581317953\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                • Size 4.2MB
                                • SHA256 c8e9651b963f95c499f283799aa8ba4a2023970bad575445fbabb71d87195b3e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                additional_file2.tmp

                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir6692_760238638\additional_file2.tmp
                                • Size 941KB
                                • SHA256 1da2f4dcf2282b5a8075726328b93aea1912779673c95f1cb88b5e5d150243c3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Icon_Light_Neutral.png

                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7748_1667978821\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                • Size 2KB
                                • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                • MD5 SHA1 SHA512 TLSH

                                heuristic_regexes.binarypb

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\AmountExtractionHeuristicRegexes\4\heuristic_regexes.binarypb
                                • Size 633B
                                • SHA256 a10f65d7e0d56702d6f08850c8bee9bd51af17f4be051900ff2b88c9217e425f
                                • MD5 SHA1 SHA512 TLSH

                                crl-set

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\CertificateRevocation\10613\crl-set
                                • Size 1.5MB
                                • SHA256 2cb3227c6d1754be453c30fa625a61d3bb19a539e2c7921435dff618645468f1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                settings.dat

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                • Size 40B
                                • SHA256 9c707c567c6eaa9656514778ca163e816bfcc167ab51a352df9dec2b6e3eef9f
                                • MD5 SHA1 SHA512

                                021a4ce3-b859-4747-a5b3-3ca659fbf40f.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\021a4ce3-b859-4747-a5b3-3ca659fbf40f.tmp
                                • Size 203B
                                • SHA256 f1e862e2c44222ddbef96f6c2a534d12ac3a26d72e62e90955c89b2bb6ee49bd
                                • MD5 SHA1 SHA512 TLSH

                                1538eccf-dbaf-4672-9394-83ffbc4ad20a.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\1538eccf-dbaf-4672-9394-83ffbc4ad20a.tmp
                                • Size 171B
                                • SHA256 08418c1f856f533b5ac2dbe9a005ed4fb19ff3019b1c1c0c31366f334b4d5fd5
                                • MD5 SHA1 SHA512 TLSH

                                167733be-b564-4e9c-91f5-82cf734ecdbd.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\167733be-b564-4e9c-91f5-82cf734ecdbd.tmp
                                • Size 2B
                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                • MD5 SHA1 SHA512

                                55b7d577-6dd7-49e5-b627-15b66eb86649.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\55b7d577-6dd7-49e5-b627-15b66eb86649.tmp
                                • Size 609KB
                                • SHA256 c732bee48b4f5bc7b9352590986ef3c9ab766e1309d4265849077013023f8975
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                8ed9248b-34c2-46ab-aef8-c6b814874f21.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\8ed9248b-34c2-46ab-aef8-c6b814874f21.tmp
                                • Size 203B
                                • SHA256 6f8faa454636d6f494ea5b44527eef17e94f1293c4f7dc4e472f4a1192da1faa
                                • MD5 SHA1 SHA512 TLSH

                                9da0b41f-4e97-4798-9277-b16b7f46c533.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\9da0b41f-4e97-4798-9277-b16b7f46c533.tmp
                                • Size 6B
                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                • MD5 SHA1 SHA512

                                Bookmarks

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                • Size 35KB
                                • SHA256 f2797bebf54d401b7c7c601a2bc3057a2343e8637e7eadd5a8a7294a063e8ff7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                BookmarksExtras

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                • Size 257KB
                                • SHA256 f766e50e79eea4093f76c199ed69d152e685a123a44ae500dd6448907ce16ec0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                4acd5191-6cbc-40a7-97f6-bf8860f1177b.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\4acd5191-6cbc-40a7-97f6-bf8860f1177b.tmp
                                • Size 48B
                                • SHA256 5b1125e27a5479b5f7be7f821ed2986ed24e2c6f40b4ddd2cca5392dd57ba74e
                                • MD5 SHA1 SHA512

                                the-real-index

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                • Size 264B
                                • SHA256 b43bcb1384dd31165549b2a1a346103fc1fa30deabfd8cb69f365a514c15f7e4
                                • MD5 SHA1 SHA512 TLSH

                                the-real-index

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                • Size 264B
                                • SHA256 22e9dc53cf5bb8e0f0f201d0d0a82b6a74c7cebd25648a42978f0cda95e282f8
                                • MD5 SHA1 SHA512 TLSH

                                the-real-index

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                • Size 792B
                                • SHA256 a59b90913b0ef196a3dd79265d4192b0fec0cd9ca9a0856e792f0f64eae154dd
                                • MD5 SHA1 SHA512 TLSH

                                the-real-index

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                • Size 792B
                                • SHA256 368d2e2507bd52ab38b0e5fded5907969f5d7d069156dc79896d1f88ce36ea2b
                                • MD5 SHA1 SHA512 TLSH

                                data_1

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_1
                                • Size 264KB
                                • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                • MD5 SHA1 SHA512 SSDEEP

                                data_0

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnWebGPUCache\data_0
                                • Size 8KB
                                • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                • MD5 SHA1 SHA512 SSDEEP

                                reader_mode.js

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir4036_712700985\CRX_INSTALL\reader_mode.js
                                • Size 112KB
                                • SHA256 f13bffb4c8373667ab9f08bbb4c9be6ce884a96f9f23048e4de39519155dafc5
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                spotify_frame_interceptor.js

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir4036_712700985\CRX_INSTALL\spotify_frame_interceptor.js
                                • Size 5KB
                                • SHA256 38f24dc260400dff44c04d95244dd245578a618965c692edeb103ef6d46cb5d9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                preview.png

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\bckiheihmdiaaoadimffbjbjafkoooaj\1.0.3_0\wallpaper\preview.png
                                • Size 464KB
                                • SHA256 c5a2b18b255c6a4029de97ef9d00af6e563b562a2abdbee1e934ff77d5a92c29
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                cos-bridge.js

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-bridge.js
                                • Size 173B
                                • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                • MD5 SHA1 SHA512 TLSH

                                cos-content.js

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-content.js
                                • Size 502B
                                • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                • MD5 SHA1 SHA512 TLSH

                                main.js

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\main.js
                                • Size 47KB
                                • SHA256 4c2cc909a2d1ca6b84270a6329e81f0f1de229ce49fd9412033a5c45e1d2e72f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                favicon_opera_one.png

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.44.0.4_0\favicon_opera_one.png
                                • Size 2KB
                                • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                • MD5 SHA1 SHA512 TLSH

                                background.js

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                • Size 86KB
                                • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Icon_Light_Neutral.png

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                • Size 2KB
                                • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                • MD5 SHA1 SHA512 TLSH

                                popup.js.LICENSE.txt

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                • Size 1KB
                                • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                • MD5 SHA1 SHA512 TLSH

                                rules.json

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                • Size 839B
                                • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                • MD5 SHA1 SHA512 TLSH

                                data_2

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\GPUCache\data_2
                                • Size 8KB
                                • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                • MD5 SHA1 SHA512 SSDEEP

                                data_3

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\GPUCache\data_3
                                • Size 8KB
                                • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                • MD5 SHA1 SHA512 SSDEEP

                                11232e1b-6ea9-40d3-8886-7d2ea2f1352d.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\11232e1b-6ea9-40d3-8886-7d2ea2f1352d.tmp
                                • Size 27KB
                                • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                444d34b4-48c4-4c15-b926-ffaf5a599e52.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\444d34b4-48c4-4c15-b926-ffaf5a599e52.tmp
                                • Size 27KB
                                • SHA256 b8f0a6164e126d0f70798a96f456487080b5473bee571bb9594600f8a53901c7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                49adc0ea-cf0f-486c-a144-32bb0c37a2a3.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\49adc0ea-cf0f-486c-a144-32bb0c37a2a3.tmp
                                • Size 27KB
                                • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                a96a6317-d6e7-4cae-8247-8cef8af18614.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\a96a6317-d6e7-4cae-8247-8cef8af18614.tmp
                                • Size 27KB
                                • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                b0bd9dfe-0ee2-485a-98df-8a3ea124638e.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\b0bd9dfe-0ee2-485a-98df-8a3ea124638e.tmp
                                • Size 27KB
                                • SHA256 39bd99139f46534251ca30ee1eafe846edde8f96356642e04b68a9f2af9799b7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                d78b01a9-ef9e-46dd-97ba-82ee76c41245.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\d78b01a9-ef9e-46dd-97ba-82ee76c41245.tmp
                                • Size 27KB
                                • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                MANIFEST-000001

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Local Storage\leveldb\MANIFEST-000001
                                • Size 41B
                                • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                • MD5 SHA1 SHA512

                                Network Persistent State

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                • Size 61B
                                • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
                                • MD5 SHA1 SHA512 TLSH

                                Network Persistent State

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                • Size 3KB
                                • SHA256 177a853619823a8f5f22b27008f38f37a78bdd07beccf6075bfcdf1c8b25463e
                                • MD5 SHA1 SHA512 TLSH

                                b0bc5f5b-d352-405f-86f0-5adf84b3f677.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\b0bc5f5b-d352-405f-86f0-5adf84b3f677.tmp
                                • Size 2B
                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                • MD5 SHA1 SHA512

                                e91088ae-17b4-435f-9422-50cff7a411e1.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\e91088ae-17b4-435f-9422-50cff7a411e1.tmp
                                • Size 111B
                                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                • MD5 SHA1 SHA512 TLSH

                                Preferences

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                • Size 16KB
                                • SHA256 03081a50305c37d1d05787f59e6a737c3bce756da5664b16993362038b05a4ae
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Preferences

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                • Size 15KB
                                • SHA256 49bf0ee1b3f5d35ba7ed635313ac0f78ddd2ed1f30f8a1a9b4eda0f0afd15823
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Preferences

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                • Size 16KB
                                • SHA256 1dd02409b631ff3d59111a7f94a24bd77a0de9488bd67731ab73c1989cacaaf2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Preferences

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                • Size 15KB
                                • SHA256 88b628582c8cc22d0fad8d736656f5b4e237af6c5096f61d714017feaaef7764
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Preferences

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                • Size 15KB
                                • SHA256 8f441ad0cbb6ae8b732fab9a1c37e40b307fc55ff1cb6bd3fee29e1bb9134673
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Preferences

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                • Size 10KB
                                • SHA256 75a19ad8939cb3467648a32f3a05892200c930aa8392660b05324b1c216c2ee5
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Preferences

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                • Size 15KB
                                • SHA256 070534b585085aacd46abd9c13f5612e42050ee203968de212bcf2ce306d0087
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Preferences

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                • Size 16KB
                                • SHA256 4f38452c4eb937c56d8961df2190e08e502e04b8fae135bb71a9e1fa87ba12f7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Secure Preferences

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                • Size 208KB
                                • SHA256 cef35b0965f9d24e356a7f3495629b53a2639ba05c2566522c08dd72a97824a7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Secure Preferences

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                • Size 91KB
                                • SHA256 57111cb9fc9c226c4374910a9cf25e316ba89dde68aa0a6c9200b16c3e58ee0d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Secure Preferences

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                • Size 91KB
                                • SHA256 43df66dfa43b06da2a8920369f613d4052c41794792d55dc537fa8a0d9f497fe
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                08b99d499107ba17_0

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\08b99d499107ba17_0
                                • Size 48KB
                                • SHA256 68f0122722c313210ff6801859d2d9462ac68fcee356b68526be978443dc6618
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                08b99d499107ba17_1

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\08b99d499107ba17_1
                                • Size 114KB
                                • SHA256 2df6aa1cfe5e709bca1ec13e3a47a0cbe7027128926a28e1c22de6d5e110d7ba
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                2ecc2c9c-f706-45d9-9d9c-610bed554dc9.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\2ecc2c9c-f706-45d9-9d9c-610bed554dc9.tmp
                                • Size 72B
                                • SHA256 9d0fb5f5207c74f4291b2fc4b856414a3d6ebe1b8d396739797e8a514eb55fd8
                                • MD5 SHA1 SHA512 TLSH

                                the-real-index

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                • Size 48B
                                • SHA256 de7420450226a1e1953eca9332491eb07e7c82d954631601d12df83deb2f1b87
                                • MD5 SHA1 SHA512

                                the-real-index

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                • Size 72B
                                • SHA256 be17b1aac4b44b5d066dc3b514d1359ef150138d144369ed53a64f705a334872
                                • MD5 SHA1 SHA512 TLSH

                                the-real-index

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                • Size 288B
                                • SHA256 df372c660ffbca59a19198a5270fdda5f568aad7c168137da83335cb1ba1ee42
                                • MD5 SHA1 SHA512 TLSH

                                0f18b326-6810-4b68-a5f4-0dd0acd8e50c.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\0f18b326-6810-4b68-a5f4-0dd0acd8e50c.tmp
                                • Size 381B
                                • SHA256 1353fff3ea3abb6afbcd701bea322b5ad212e208a0f04ad8a48355fb37feaf8a
                                • MD5 SHA1 SHA512 TLSH

                                536ab9c7-f1e6-41c2-8a50-815652adb07a.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\536ab9c7-f1e6-41c2-8a50-815652adb07a.tmp
                                • Size 381B
                                • SHA256 1e5b73ebe6d0cf51199017b38c89ff378d481dd6c5844fc41d4c56727569bb9a
                                • MD5 SHA1 SHA512 TLSH

                                bd8165ac-ce93-410c-9404-48db0c94c9ed.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\bd8165ac-ce93-410c-9404-48db0c94c9ed.tmp
                                • Size 381B
                                • SHA256 6dc496a30da768f387e4fca8326e85db22d916127aadede4d48845cce2a37269
                                • MD5 SHA1 SHA512 TLSH

                                session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
                                • Size 781B
                                • SHA256 e763d4c6f20a7945ce1cddfb1249eebb9c853c4c88986956bfefbecb93e9dd0d
                                • MD5 SHA1 SHA512 TLSH

                                session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
                                • Size 1KB
                                • SHA256 9610cd6f593245febe2995709d08104bd94c2e6cc30b63d83458e1b2b21ecd5d
                                • MD5 SHA1 SHA512 TLSH

                                session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
                                • Size 493B
                                • SHA256 df1369c08f16ab953e6aefaf2eb578639208d9ffb72ed92553b09c10e7d190e7
                                • MD5 SHA1 SHA512 TLSH

                                session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
                                • Size 781B
                                • SHA256 cfada97973fb42ed8b1c790013bc2a5a625e7d5cb3229b61d32b12934f56bb0f
                                • MD5 SHA1 SHA512 TLSH

                                session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
                                • Size 957B
                                • SHA256 0691b714d86ef3fa9010d6426550ace3c870012d5b6c4c3ec0e6974856ab0a56
                                • MD5 SHA1 SHA512 TLSH

                                session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
                                • Size 765B
                                • SHA256 6079a7d272a827765a14112496bee4d640dbc700ef972ca35e295398a42a4773
                                • MD5 SHA1 SHA512 TLSH

                                session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
                                • Size 605B
                                • SHA256 bb6a1fdaccb72d57db057c821eb1ae1a32825b66369da228b48be8e576f8c1c5
                                • MD5 SHA1 SHA512 TLSH

                                session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
                                • Size 1KB
                                • SHA256 9cd4e0e6fa2353d7d39f87bcb93501bab4b48d9de9ab971577457641666ab327
                                • MD5 SHA1 SHA512 TLSH

                                session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
                                • Size 1KB
                                • SHA256 b0f995daaf8127296959d026811a7f2c80a25951ed46fec94ab840b95e251540
                                • MD5 SHA1 SHA512 TLSH

                                session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_16b5ee0a-a94d-40be-a824-7c215563dcdb.raw
                                • Size 1KB
                                • SHA256 8a5a8e3cc439dee25e5463666cb6fb674694955b43bef1dda12a2bca2eddbebc
                                • MD5 SHA1 SHA512 TLSH

                                session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw
                                • Size 493B
                                • SHA256 9fd68ad37947655d3b8a3c62e71dc53f03286ae73a3ab6c3729c7324f8231a06
                                • MD5 SHA1 SHA512 TLSH

                                session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw
                                • Size 605B
                                • SHA256 a90d477565e271c6617845ccde1aeb755ce99d0be015bfe6a32eea08da0a88fc
                                • MD5 SHA1 SHA512 TLSH

                                session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw
                                • Size 637B
                                • SHA256 7330d3dec8dd521df76f007258121f11c445a11ca7ee96c92a0c560855ad827d
                                • MD5 SHA1 SHA512 TLSH

                                session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw
                                • Size 637B
                                • SHA256 0c2b21e452595d6b4f507323a40d6c2f478cd966411635066e65e1aa55097c07
                                • MD5 SHA1 SHA512 TLSH

                                session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw
                                • Size 637B
                                • SHA256 3b71477689468b670d97f1a4bd89c96f4bbc9f7b1bd10ac8b70cc8262b2f6d62
                                • MD5 SHA1 SHA512 TLSH

                                session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw
                                • Size 797B
                                • SHA256 67c6cd4805a71cb1f6ccf7ab5e7f6aa470358eae8de05d466f4a9ddc789c720d
                                • MD5 SHA1 SHA512 TLSH

                                session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_2157f7bd-4c1d-44f8-86e0-82d6fac401e0.raw
                                • Size 829B
                                • SHA256 ac89e9b8946766516ac044a8b99de1893151343c7f42169f4b5fce37ec985963
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 276f28834ca747e8e84a2f0b8de39abeb0ae85b2c1ee84bbc088410434240d40
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 2d1fa30240d33a70f119509d3b1c78c59e85c2d597bd9596a51009b7f3a9d1a2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 cbfe6528f89eaa28608170c5989f26032af9e38cd8e52786575049d4b9bbf839
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 2a870e45ef7df73045035a0246871a1c8ae466e10b94ca8050d15deed3e0de0b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 9KB
                                • SHA256 5ea661b7a4c32d2222bfc045a201fec845cea77ea67c6a3455e09e3a88ece67e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 9KB
                                • SHA256 8252d669ac0ebf43e8c066247cdbe65e661120dba13a0ee4fc6881db709b25ce
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 c705e6d61fab51aa90dbd554ab55cf0d9bbfb9aa8cfaecf13420b08a943c874b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 227fd8b64563c516c1c353446e63689e977142e899878a399e725526170eb823
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 5d7936b3990c7e466e97bd60392e05c4332caf4fd93173f4e675a6b3aed98945
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 5cfd9b8ceabfb0fec7e4eb6ecdfb70a7f36f2e471f06d3c1f004bf698bb82081
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 879d2617b45ad25403cd461f86df184f7c812489c4a1f975415f85010bca6fe6
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 1a6039d093320170560c9a83e672cd183d959f0e4cb452bbf7d6111cc544131f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 8052d0e9c554e585adfd02814ff24130074244d5ee39370b4b3359e8fcd10c88
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 4eeaff561921d81e6f2cc72af8b09b40ee59d7310e3efbc24d6665ab1a36b8ee
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 8e6e5d47a968f144266ef3a9fa72120292694ff50cbe5effe95861f24517cdde
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 f47a0e51559a5669264c80c3b0acdbff0a60c2adb155f1fa9aa0d62d8f543554
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 4c7ca7246f668d00d7a3e7266229e177b859a2efc7ba66569b5526b599ade626
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 c9dfe51016bc311040a3ce729d9d8b628504d8817a13388ac547ef1476e8e0db
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 1de645d8183b6fd07cac1c1acc0aac86168f6a98fb0b91f188d48cafe7bba449
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 7f6cef0fb311b0f9f507acd8f1341066b21647e0bce91be785b24daee635fa9e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 0fc8ea263104b299f6d8f0eb0a800e8571f4dc10a3b58ad052e194f9f3f1d46a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 371c5520b309c6e50f4f6eae1eae6494a0cda88d63fed4db3f76bc21c14e72f1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 493B
                                • SHA256 fdf679b2d3bdd4964e00a7d0c1fcedde97882fe4ed01714d3d7c872afd94186a
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 605B
                                • SHA256 6efe8f6f751983dd0c26ab6f6fa839691a1f9b0904fa30be9c52da8fbff6171e
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 1KB
                                • SHA256 dc6b336042edaa5ea566c3e71dbd1247bae301ce7db93a65ac2007d171bec716
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 1KB
                                • SHA256 4c638856f8d8eaa5dfbc5555eb7ed251dff347f7be0e75e87d18e6a49b7a913d
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 9KB
                                • SHA256 0d0a4263586ee3823375bfe97f7f5db80011809bae04bd588df2e0056022966d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 9KB
                                • SHA256 d914a286175d83b52eedc76f6af5f48e8d35ee2e8bceba84f206feb3a90832ae
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 9KB
                                • SHA256 2bfc19e3e96e7e7e8ea2cc931e0b63ba8f31ec43714f86c825576aa7dfc36f1b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 9KB
                                • SHA256 31d3401845207d0e845cb11cb2159b4a5e4251fe32f5ff32706a602ea4468269
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 9KB
                                • SHA256 e998f72f3f683a4b0a0c765a650e2337df925912634b7390b09f2b814a3efa7c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 033bc7fa9672055c2f32fe63e997dc29dcd34fcfef45f26462fd2792f3d81005
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 09ad82d471ff8c2ff2690fcf8222363e5073406900d161bc22f8579f5cfbc32e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 087a0309dc5118ab17645e188b3a7622c0a30f4d1d338a78ea68556372157239
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 fae82843ac3f0d693d3bf6592f6c78fa19488e53173b9582f8006b45a8f6e559
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 6e800d82261a4911c148303ffb3d04f21e70cfecb32e1f15a3967e862ff857a4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 9a58abaa70ec8885c285be50f4a2d0bdf7ffa89ecee234175a9560990c835d55
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 7eb86bd2caa841de839a5282d64b1d7ae628170da58c8427a9b66b7d86000803
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 3350ecd27adc84b90f53473a89b13fb2a6ffd42b4d3c9ab1e9d3d6d50ad43264
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 bad14b1aa9f11fe8cc4ff6b9511c07da44a8079387aec4817b66d3dd2f6cbd03
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 6a43b61919866a311e31149069ddd7f0d52e6844bad4630656d61b8de522a110
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 0c11f4dbf7da7b76e603044acc208f6d9600d284b7340963a3d2fd052e3f1724
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 11KB
                                • SHA256 5ece9977cc42d210ef3d3ba5dfad9be0aa9bdf2ae6fb231076660e520ef01e9b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 11KB
                                • SHA256 95112e624d7a50fc5f439bb1b16f4d5cc4788f65fc5c342b1320096b127c0358
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 301f74dc63abe622732bce2fd859ab7f74b30bece21de48fa3e8934f0ae394d2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 ea4b04ca1f52b5765e9f1bb27035f812a798a692bd0a6c03359a73a8e67bc4be
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 09bfd4664a1a1934d1a7289496b78a4012eda5af40e2e34c97f9069ba31517e2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 1KB
                                • SHA256 d3a399fec5c50968cd6168eadd22a057b7e5d8f30b86f81e2b24c13a819413ca
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 733B
                                • SHA256 02a648a97307a4113bbfc0fe0035e2b8d4d424f41d8f640277edcb44e24a85d3
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 909B
                                • SHA256 f66845af6ddf7628695fd70213a1a49731f410a1a01b979ff30bd8971a6e3d09
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 957B
                                • SHA256 f707a93c2d0627836fb1e739fedc16106f6822241fc80927fedd1eab7e4617b4
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 2eec18fcd3cca00264331e94fb16b3747a09259e8f710bb988e6fd036bdd7bf2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 9KB
                                • SHA256 8921f7c8c3f41072d3c080308038694b09be90aff9c4a98471cd710dd624ad1f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 8c636764a14e3ec7af6d8abb245e0addcb6bee177617b4c16c57f6c2ac7171df
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 11KB
                                • SHA256 3f56eb89cd8f48ca3c6b9ac152fd541b2b7e7ba70895d7b83a88e7c41856de0b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 3a85dfcfa50c57f2a5d29ee20e04294fe5577477994ea7233125df86b3df3a9d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 11KB
                                • SHA256 274f5de34e7827425368ad74e242b990b23a4b43dd51967881c92d5dc1ac1a94
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 11KB
                                • SHA256 ee8f35421143f527e7dcd87d89cbf25dc06ae194fcc1d1ff6beb85c881a4b1d3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 50057ea5f51adbe15b7d414aa62c74011847d286e22256d106f9f63e97656ef1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 98f50c475d6c4056400d94f5be57e666fa841cb4daad83fde7c3ed78712df669
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 0dcedc940cd626dfe02daf460e046611be343cc518f7355c5fd2c338f7405fc1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 7KB
                                • SHA256 c06f67ec5d601aa2d7cb54d6f43b3c923aa0cce861b0d184483f9cafeabe3cc8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 12KB
                                • SHA256 810981f7ed0a46e3ffb4de33de80412c70175d415a1820e3b829039538bd6723
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 1KB
                                • SHA256 fe8d5c86e5eeed0403169a92ecff873cc8d48a8ee63c5f503aa9443b38cef26b
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 11KB
                                • SHA256 c0f3e8ffd4a2fe29f1013f6f6fabc4bdcbfdda3b88328be1d508188b43a84a22
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 12KB
                                • SHA256 5822fd56865dec30685b6ad1ed7eb0062a65a8ec702b33f495d26de096ee73a1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 940876bfb746558529ed095353aab232e942b45e3702157c494c376c1abe3ce8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 7b0fe357b2497b5decb000739419a2e17f16586b1fafdd989f4cf40d39b5597a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 8KB
                                • SHA256 2d13f0fcce8215debbf60547b149cf3b6e7bf5550c3b5ef23b412be3a49b8ed4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 1KB
                                • SHA256 5199b2ec59d10f9e1e2d61ff8ddb5294442bf5b5818b7285028e6185f8356b15
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 1KB
                                • SHA256 d721a244230fed8712681148dc7a86415c38526d44e540a4d650e6d5a0f7b96b
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 13ac486bd620e1352d38f76a70e72b6b30b876a0539d21df220cdfcc2b16251a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 8KB
                                • SHA256 1fabbe75ccd5e5d8497a5af177ef64299c89fb0541cecdcff12c079125981c6e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 8KB
                                • SHA256 d938b4b6756b09462b94cb77637e5e33f330b0c55edfc9db921ec9c0ebc4ec06
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 1KB
                                • SHA256 e5392412cb57dd0dfc9d1cd849033cb9b4a044911e93008b99ba89e24725f032
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 12KB
                                • SHA256 d93d53e9f6b7e6dd41c5c1161c399059ad9fe4a66577ff45ff6b8591e2043e26
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 d87583098908472dde03fdbea90ece1f8733ddf6db98cd1c08194906e53fe629
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 11KB
                                • SHA256 e430aea096ca916d3414d2243747c0f8bc4bf2a619e834e65b18c8254a14a4ae
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 13KB
                                • SHA256 1101f86860ae41d6e1f4521108e7174641ad674206a7bd88b37ac536664ff72e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 7d51639b70029f6d17773bb693b8c7fd46c64a72070b9fef95b8ed7ae3ec8e3e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 efeec86f45e34e3fa53ab9254fff184971b5b6977d30dd600bc29f13e1606ebd
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 b7ce7a200bd396eac8a4164a5ecba59eb7fdd94b5dbf7087380037023e3021b4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 85651ae0c8028af7bf7bcc2c30c115a49ab2820cc54f551a98bb4fbf1c4356c0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 21850a15e15feb1f029c93b0b48d1237c0212a5d70055b336f69fca128fdae70
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 12KB
                                • SHA256 f73c5d19668cb3b3ada0e9642e750f9f75aef700eddc8e96257ac3f236cd5333
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 1KB
                                • SHA256 9ad1653d643febb4c36fcf4e2c137e8662ad8a454c036539648f621a15127559
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 9KB
                                • SHA256 c5e734a9135b08df2de1c3f82973960baece3c0ac4369a84b2c4700c4ba658c3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 14KB
                                • SHA256 a4b33f21ffa059c0068b4c393c1dcfbb97922a59a89d46135d2854dff52e72e3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 fd1503cae61904647953f4c8d0b11d0dd661c5b5aa7817f6343f193b0d5146b1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 ae0040968519633be20cf49eec64e81cd72b992631e547215adf1ae0e3c5b2c0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 12KB
                                • SHA256 897143af10b1ae6e6f4fc93b3e0920b4bce8f3ab77c703a9441277d367b299cf
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 99da14731443ab454e2ac787725b58c31ff617abc9d678fe37732ba82d793892
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 1d02d965263993650092f34c4af837b0788c00bb7a445742f190cabf44a8156b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 7KB
                                • SHA256 9f0385f95c8eebebe62a681b0d8ac4d7b0e32303a47ce53c4971e1f13037015c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 4a6fe9fcd5748273b50a492205d7551976bf7414043140f200356fc3783265d3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 1KB
                                • SHA256 f2c75758908e0efbec64df26358fd92583d773d2d14001377137bf56522c8f41
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 c98c997e3d646285903048c1c4a5e0706255214ac70f09dbc0ca822342e70e55
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 14KB
                                • SHA256 5c2bda987374caf6fde690c273f23bb0674def300b92de9a424aa879c439f8c2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 12KB
                                • SHA256 6a727b63c3b16f2f74035996e93f204b5c635244f480decbdb6e5b223832a49a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 9KB
                                • SHA256 d16321cc18226bdc461eaab82c7a94b9b10f2bb2b560b0dcef0318b619e75275
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 13KB
                                • SHA256 41448a55b64286d9d8e40791a3baaf59f676333807576b130a0c75279b7f6db7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 48a12f87a98b6b149f85025fb76850c93414745365f4a5aa6f900db22a9dc688
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 12KB
                                • SHA256 d52e2a99292d6f5ead341be7ca1acf369c79be49db5b704b032edbc8b565179e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 db0a1cb53e2bbc60bb43fc538a665fd61b4939ff0aaff92f2f8745bae067a30d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 dcd5cf9a2f53dea778aa6bdc09a144ba756889a1edc5e550bd61ec72b25fe231
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 b56f1536eb57ade5801aaf8115f1cdb2a8b42604a29287c7b30e2b08597f64b2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 7KB
                                • SHA256 2915f3795f94ae65f6b239e6fba6727564fe2fd0b86916d013d0ff1d740fc81b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 13KB
                                • SHA256 0f3eaaf0a88a2ac335ed1422928206a271309fa5484b966d9b8b702ae6e15100
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 afff5050cd4122ac110779828a1becb5a5ab86f21e98605facfab376d834bfec
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 13KB
                                • SHA256 a4ad4f3ea63cbf22551b68c0e8b8ae32bc32268951a223e5b89c15aeb060dd0f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 c5d9c2cc70c1f01e29c08b103d61d38766b1a64871369957c38512e142ef148b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 a06edf9b1c2cdc9ef0963444be723e860484cc03a410736e14f09f40b43764b5
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 2f36f3992ad6fbe6b29ccc6d5c5119e49ab30e337e615c58cc624de75a5503a7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 13KB
                                • SHA256 1089a47f600dbf8c6edf14337449b10848d507301b3332d3033350e21b6c6fcb
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 01a9f1b1ea0e001c5757ec77a5a389302edc7e4924df6eafdbc4c56eeda4184f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 841494315b0fa22f2f1cf92ea7115018b987b3d775590068d0be25ad5b21ff6d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 1KB
                                • SHA256 0e8f575ca3d69d293333a38e58fc3b99b9d7211edcecceba3d9aee5c19fd5132
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 9KB
                                • SHA256 a132b3498419d2adec5632cde74c83dc41f60fd41a64f88ad9d6657adfb153b9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 14KB
                                • SHA256 39baaa16d43b3665cc325afa56f596fd61ad61dd3504a0de7a54e8872fb694eb
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 f337d64a4b507b5ad8743aba4a2ac42c99ada97e24647a91d3876ceda035e4b1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 e38563de829fa99138cd75ffd2731cf230d4c21e7f4ed9910f587be22cc4a237
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 13KB
                                • SHA256 24cc370ba6e9cef9b649698758688a9249c0cec0de3d2edb59dfc793f1cef9c9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 1937c0f0609ef2fc4f7c67a60311329b5b8bf966a933cec4b6100693c0eb8143
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 1KB
                                • SHA256 98b88374d334800eda67187ba9ee10c6958af0083c6e1a000028215b8ddf98ae
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 29185c7114bfcad2aa5ebedb6f7f720f9b73e437c920ffc317f0b10928b9729b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 2KB
                                • SHA256 cdf7857b939ab9e5ee9dd1df41c99dce82aa41de5503690fd2c2e3513d02e77b
                                • MD5 SHA1 SHA512 TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 704f7f385938c017343c41ff4fb63ffc71cc83d4e3deebc89f8155de15ac7469
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 13KB
                                • SHA256 6f00bd71f19637406f15c46482e0fa06dbe711329cc78b41aa63ae71a6eaaf34
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 8d85fe1c53dd038ee3bff2ad44f840b41809bb7b084a373a7ef2b138e84ba907
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 14KB
                                • SHA256 266d99e0bb0ff8057b49c8f96d51b781047625be9dbf5c691f949625ad1343e7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 1ad0959cdb2740426204151a1790367fa51ec3c27d72386d669a91665bdc8ef9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 f37eee2c60163871c798e6347da544b3fd08286263a16f88561de38d4671becd
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 a5c70f6ae586270b144a4b7a72898d9b0830601ea7f4fb68c10242353eea0a68
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 9KB
                                • SHA256 af6004e7091be3e7c04c36eb3849327347518df6cf313f5ba950b56a1317dfd0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 cb16080d36680e813f8a2761ed830f9eebc0d23684e6ca289f4955ff21d39244
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 59b9e7e38952eea9e16349a8fcad02372124ab0c8f4994c19a32856ca84f37cd
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 6c237a5362e53c2fcf701454f3a74c41417724cf83e5b9c83228e11c78d95eae
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 1c56599a79ee795816e5dd39b7f647b3f196a5317ce30d26f6e210091ed1f8c8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 14KB
                                • SHA256 5c17c289169427ed17a492764e1c52decc9f937b92b8e55ad0ed1c4db9c8fbd3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 81ddd7fc12b86ec70d03c423f625315dd91bc61d53b1d40a4a5321811f37a211
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 60a2970a46b2d8d37a3d4d3dcfdc33b653d7dfc2c6e57dca8f33c8deb7bd3a1c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 10KB
                                • SHA256 209d86adefc2168247897679d17bfce7595a767e8cc87055c0fa7fb884e2d122
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 c75ab480ab2a979268e4a1e36de7edf0943d44fb6fa2437cf0465737e5d8ceeb
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 14KB
                                • SHA256 65b45b54cfe7712bb8cda986605f2d755a3370430d12dc26ac32689fcdffddf7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 dc014844a62476a1f2d2a2de9f6b5144212a3e4820ca07352f2aeb0a23edab64
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 860cb7caa8aac7ef5e9e4324066c7dd2fc659822461b9e51d2f37ea32b7ec5a2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 b8ea4c0eb8d0988dad4058bed26facd9a47e7f4697bbcb67249f5a6ed3060306
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 d667c44d783f3ee18eaae9f959c04286ad6ebf7c33cedfba09cfec804c135823
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 4c3dd487788d63256c8305a82b9d7ef9ae379956fa79bbc5c7aa21ab5b628bf6
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 1f3193138d26b8244ffb114a9a972ba55a6cabe6452b29e116a55a88e6e4f7ff
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 6296c19b46b2267bb527f42d858105aa798701f55b212c30014b184befa94f45
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 2cd2e685898417e1d70057904b169e5132947c72c8f6e5fc7766e575bd3b8b13
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 7c4cd1c82702ff3a20107b589c61e3c9c82e6584c96539d4c1578f35cae48b52
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 3b29251ff2a8301e6002113de03b13427cb931df1cdbefe6d0400c187bfccf71
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 840ea06b837e3a782664bc319f4672beb1e816ae99d1a8f0996f2b0f189aeb40
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 63c3cee9c234c4926a6505ad11a0749883f882a3d67dc0b96068b350c123b417
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 bd7862bab3d89f2b5d24e0219dac8ffd089d484b9d456f280d97e59f090362f8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 d69ef5eab18cdb5000a7d10fcfaa01d8c8bf5ba1892b888230b9632a476b98bb
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 a2e06f5acd5da022783277a75132636b31ec3f6ec1d6f6a4745b29dd9331f511
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 9b01a5bda9d0887d26ba13114becdeb851b846ee406f95b9568ab3b9094b3361
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 140832e06ba9bfc2387bcaef72937e373b239f58df18a415b1b7e1c2f8be651b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 6a020e3ba137c43e7cf56e6142793fa988ac418c484bd4d38ad153cabb6dbc11
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 be9b337b5254d4446197d24dd835e3237d6f6dc626dba4309c74d7a24a0765ae
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 17ac9953d6a06e4ecbdb6ace0f448098634ad16b76907dd8b35aa74af9caf08b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 c35c6dac888bb23641037ad785d9cd423db919df261fa47253992842705ac358
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 4a6a69e7cf0f4323ea708c1f6293e6fd46afd24cc7ac1663e382b6fcc2fb7cf8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 1af77c54ebbab0df584a3bd61ecee0aec2c6309a3630e80a16e0cdd93aa463b8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 15KB
                                • SHA256 9159e80c0a0941eb9fbe0dbb32f7db2bd70cc751f9870cc92d849bdf0c029d89
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 74e82d3c18988efe5289d3c5b0031751e923e4afddcd3d7f21146d5c7350d94c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 81d8d896f86074e79ec3c549f9b73653dd39b4afe60403f5e3a1b1016e33dcdb
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 2a42bca70b4f9935224f480fbf7c902ecbb53b1b98290ec50804646a06f5b38a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 16KB
                                • SHA256 e4cc7cc06ae382b10ade303e09768cbd381c8a843512c57025fcf7f2f25ad2ac
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 b7b5a4687e21c75cf41840b201f9afa7574eab9e369203594007d50e9c880f66
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 30ba543db617163e91a6667f6dd4dcf1ae917af5204c347cfc36dd60b84935a0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_94621e58-9473-4796-a0a5-8e9f31d3e4f2.raw
                                • Size 17KB
                                • SHA256 8a6c5f57f24a103056a87837fc98ec85c0f3df464fdfae517aadfc942383a07d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                CURRENT

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
                                • Size 16B
                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                • MD5 SHA1 SHA512

                                a23a7888-f2e1-48a9-b463-1cff75de8835.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\a23a7888-f2e1-48a9-b463-1cff75de8835.tmp
                                • Size 456B
                                • SHA256 62d37dc22f4c6cdb3a9e719d2d39d7e6d17d7d05fd2c515d33432ccb76da2932
                                • MD5 SHA1 SHA512 TLSH

                                d0206106-c433-4462-a0fc-32d1da137101.tmp

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\d0206106-c433-4462-a0fc-32d1da137101.tmp
                                • Size 10KB
                                • SHA256 945476b5e76ddd365a8a5f7e60ad46ecf1633295b568b0aad44bb38724a3dcdf
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ssdfp4036.0.1917145737

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4036.0.1917145737
                                • Size 1KB
                                • SHA256 024e85fb16a161132b29e20200d85b9f1849cc097e4c2085ca71507ee3659a51
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp4036.0.1917145737

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4036.0.1917145737
                                • Size 266B
                                • SHA256 c7ca97ce63d77288bc3f9060419d1562699f6be632f0efc75b6c607b29d0d961
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp4036.0.1917145737

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4036.0.1917145737
                                • Size 2KB
                                • SHA256 4304a0809b5a0ba222cf5ddcc5a561eb38dcc0358af704c09d53be7302571452
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp6692.0.959245695

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6692.0.959245695
                                • Size 266B
                                • SHA256 b3ea1ba4259dfef0d2345df9cbd4a6e6fee4c55cbfa2fdbbe189c4a4532b9bb6
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp6692.0.959245695

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6692.0.959245695
                                • Size 1KB
                                • SHA256 beb72055a1a5a35dfee03c54f8c6c5076d12204eee9a9a317e87cc9e5f4f3952
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp6692.0.959245695

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp6692.0.959245695
                                • Size 2KB
                                • SHA256 391570f60ccc77b5a2d226fcc636b55759c84a681410ec224e63d822e62ae398
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 1014B
                                • SHA256 aeeeda4510de9b1e7cbd85d98e939648edb39fd96c0e235349641031eeec7105
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 1KB
                                • SHA256 9297d76a6df5a01bf2b7b0ec63d2d797ecfc82e010123feb1e9d0163c9bf4dde
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 824B
                                • SHA256 9e2c140b71f192384f28395706cc960aa731b2066047c6ca33afcc791ea1e1b3
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 918B
                                • SHA256 49aa440eae794456ed2b5d6717f5ec6d9413557c48f959514f84d84c4d81d5ce
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 1KB
                                • SHA256 f3fd942e2c0d4959dd9313be42b26431841209cb0f3970c43ea5552bcc7a44cf
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 1KB
                                • SHA256 6d2ad5e91cdbef9ca8526fbc28a023236ef252bd49b93739334dcfd0ab9e53fc
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 1KB
                                • SHA256 e22b30497efe4fc378fbff45a37c36afad1eaf8743fc791f6d247673652f86d1
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 1KB
                                • SHA256 f3c7ec87b7a0b32046f0124228a8cdb088da2a02121a04d88d9ee3f0cd10b055
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 647B
                                • SHA256 86875ef610151935eb419c3a07f354a67ee4ffb0c11c8fc0f1658d9339a2d1d7
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 1KB
                                • SHA256 bfb199ccb4c227fb74205bbd17320e47f3014583febd9691a12606f17968ffa6
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 737B
                                • SHA256 c2244a4ece49a102b3001fa489ae20270d36e2e41292abd3042a68c5e504f8c3
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 1KB
                                • SHA256 0a140422aba16543fdf62474410a8abb5c39d553d28058036978863937b4c535
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 4KB
                                • SHA256 724143a323bca346493135d2bf8fb52005746b04a4b822a4b42bfe5461cd80ef
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 3KB
                                • SHA256 902a6d69db70cf3ca1f12bac1d964b3773c4d6e97b3a4ce35e05254761f62387
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 4KB
                                • SHA256 e6cbcd154dcedf0bc99de04351806a061def08fa3e0e6c0dc115f2b032161d6c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 4KB
                                • SHA256 92715ea5fd4a2fd6e23de0becdfe7dd36c3c3dfffd7ff4378c0b3fd0a3f831ed
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 4KB
                                • SHA256 360f532223481ea14bd95739da7593b2997332f0705868e01fb07cfe576c6a63
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 4KB
                                • SHA256 a0525e6d4fa9bc236c0a253a1cb768e5c1dc9969f0eb6bcd875044b384734dfe
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 2KB
                                • SHA256 d771e5c914b9766c6c26888b59c3cb4813ae681f640a7f14164d37e5e637a6b8
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 4KB
                                • SHA256 c2b3d2fb8fda6f80dbe3f1bc45046232a2b3835b5356a26d36fe3241f4700e6e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 4KB
                                • SHA256 9ca718a33e1bc845774692c12aa4598cb270e78f4b82d86eb99f3c9c402a1941
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ssdfp7748.0.2047413808

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.0.2047413808
                                • Size 549B
                                • SHA256 c82693b4d0f94916b1bbe5b069d1990efd4fdc4a91d35b1b9cdf3d78d6123e3f
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 09e89838d302d8c1a3c401b5403d1db433bca71bfc914e5f2954d9dab9fb7a2d
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 715B
                                • SHA256 448d36ff3c8ac6b05271e55c90e78aa4dbc2bc92921f44d13e2a85cde5c591a0
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 6789db48980e736e882e2c93606ad24fe816ce33e21cb3be8780243c7b364e3f
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 77e43021aafa63ec87452a7f4a745cd9c5d4cf4cda7f97a1d9fa1fb4e6f9a9a1
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 cb0a262dc3e68d676018df37c9cef1ebb584e3ddb4a2b7ed60d5a8530606d99b
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 1ceef861dff8a0123ab975f8a5b39fe12d6d80cbe0d49d38ea7730c95338febb
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 f5e6d1ce12c1e687e59ac891d0bf2281ea9ac48438b6b98aa5d6031b3bc54a04
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 ee9a410cc64f95dab102e49b72a7bd1333e46a5372c0cb689d737669670fd401
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 f1fdcb1941299830914f51cbd88274b7fde71badf188305c2cad94e71a21eb92
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 37d57852a27b330fbdff9f0e36314322ab31de1dd523bcfa92bf41c24d99241c
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 200B
                                • SHA256 58f1d6e55a5dc43c4781ff9129ab3ceaf2895ff82b79b1d0c9830a0fa4ac221a
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 3d7f92784229c910b244cc873e73c8d79bf71f32a94736293864e69724b947ac
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 64cbc852fedc22dc23f4cddd8545a62d8f4b85763481317857c1523af173d092
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 b8eae9c1396b54426d8cb816eb49311f9b0720dd26cbe1d5f56bd567bacff44d
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 434B
                                • SHA256 d2dc4247283b8d603121227ddf0b53c004f007ca653687b14894c566a1403ed0
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 e2fe0b10a9884212e4cd877c25bfec54d38cec357f9f746b07b66c6071d372c8
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 992B
                                • SHA256 6ac5347e98383b42820ba6c81b3b2f173a0a7c3ac2719a0be2ef6f1a86b63cdb
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 ffcde473e44cfd9d299eab880773b47ccb9edc7580fe9d32e8bbf5ac55cdf9e3
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 802B
                                • SHA256 3b57386256e1c99fe7b041956d1021c6584092862b0e3b14b82e0e99bbc3d7df
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 a80a28dc1b4a09691f5a21026659b4272ebe94a7f449dafd12fe430b281059f1
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 527B
                                • SHA256 22d40036da98c413c4cfd75a359bddb0bca6d9fcd1aceb84bd8c4c4b23a54e21
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 a11c3432e91d57852eab7d6faa5690b6f4d9e80e3e909bc15ef2330b984fbba2
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 b64f010798f5c97408babbd80cb483f5a82ad1374dd535ad3cc84a6f9d132c4e
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 0c6ab5b5a46ad5126cddae319a404b72f3703dfd885d51175f182000775f245b
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 cdc628cd3804289ac6bf0d1cae5f83bdecb71a417365f687e175620c0ab88b4f
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 e53e546a62e993f3977506fc2b95fcc76cf6f1dd82fb4996974c31ac313a6fcb
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 434f08b43a1b9413529ddb22acd047b31fdfe691cb7a4f2e0b4e1f7a69fa1bf6
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 896B
                                • SHA256 4241e3b5a630b52e29231f5fa7d685852f0ddf53226821d6ebb9a00b13ab30ae
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 be05dba3c14e5b1395bf3262280fe50274b77bff28fc2bede0267466dc737512
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 625B
                                • SHA256 830e8c4749bb239020058b0487c64eb91ff5e8ed78cf0912e26cc9a0811613ed
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 8880954d90f336bba15b993f355f42a87fceed2410623c684f934a41017bd5ca
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 6e54c48a4f4c057a2538d67664b1b6c3b3bd3f51cd02cf5225b0246d40d3024d
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 9bb4e20b32e6ceb8206a87fe04ed0b832203d19689b7cf755dd82337c01a5222
                                • MD5 SHA1 SHA512 TLSH

                                ssdfp7748.1.3738471

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7748.1.3738471
                                • Size 1KB
                                • SHA256 919851c30d94ed9c9097fbbcd9f255d4298ac37c1064391b34e9deabfb2f64bd
                                • MD5 SHA1 SHA512 TLSH

                                Local State

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                • Size 2KB
                                • SHA256 adaa9d98e3508eaadf8afb80f4f61d4f42b76349f6fb54d1d25ebf31b9b03d24
                                • MD5 SHA1 SHA512 TLSH

                                Local State

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                • Size 3KB
                                • SHA256 e359e8076c68fd807ab33daad755a1270352f83d6d62c9166ce6893f3d1af5e3
                                • MD5 SHA1 SHA512 TLSH

                                Local State

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                • Size 5KB
                                • SHA256 dca74f2dc1d970a7fc1c5812d8261e05c87dab32041d4956c723ce23a2065120
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Local State

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                • Size 5KB
                                • SHA256 62e3344618f3b43dd0f7807ee2c63ac04e952aa20201f3fcd4ca1d1546a8ef18
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Local State

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                • Size 3KB
                                • SHA256 03900f5c0af011319cf8c224719a8a46ea3541355029a586ea83efea7a255cbc
                                • MD5 SHA1 SHA512 TLSH

                                preloaded_data.pb

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\MEIPreload\1.1.0.3\preloaded_data.pb
                                • Size 8KB
                                • SHA256 9b32ba9222d44bebc479ffa9704d2a9abccae153982838a3b9a79846b80877a3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                Google.Widevine.CDM.dll

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\MediaFoundationWidevineCdm\x64\1.0.2738.0\Google.Widevine.CDM.dll
                                • Size 2.7MB
                                • SHA256 cb190e7d1b002a3050705580dd51eba895a19eb09620bdd48d63085d5d88031e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                verified_contents.json

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\MediaFoundationWidevineCdm\x64\1.0.2738.0\_metadata\verified_contents.json
                                • Size 1KB
                                • SHA256 43daa4139d3ed90f4b4635bd4d32346eb8e8528d0d5332052fcda8f7860db729
                                • MD5 SHA1 SHA512 TLSH

                                crs.pb

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\PKIMetadata\1704\crs.pb
                                • Size 301KB
                                • SHA256 1ef31ba62e4e5a5cd3453a6481b1a3dae3ed34f246b2642a48d7e7fed25d9956
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ct_config.pb

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\PKIMetadata\1704\ct_config.pb
                                • Size 57KB
                                • SHA256 0449377fc3713427d3c401dca2a07ddf06c492f56aaebc46d4c1e760ed6ca757
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                kp_pinslist.pb

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\PKIMetadata\1704\kp_pinslist.pb
                                • Size 10KB
                                • SHA256 7ca99fe2e5da8309102657b8e727f2f1327f00a64c3d7aaa771e64bb0f1dbf64
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                safety_tips.pb

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\SafetyTips\3091\safety_tips.pb
                                • Size 180KB
                                • SHA256 3e2a292d081a583e0e612d9d7882898da20a966ee76c0a9162b271f8eb043360
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                assistant_prefs.json

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                • Size 151B
                                • SHA256 a680dcbf706b9c47b5446f1f1e4be883b84d8f9d86b8f6eb30d88c7132875e3e
                                • MD5 SHA1 SHA512 TLSH

                                assistant_prefs.json

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                • Size 151B
                                • SHA256 6f0795af609c873202b3c6ae844ca1c66fa236b007c6027cf63f47073a0c0a3b
                                • MD5 SHA1 SHA512 TLSH

                                assistant_prefs.json

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                • Size 151B
                                • SHA256 1461e10bfbc9a713ec3acd046f6a971864966c78ada6317e24876fe1ad21904c
                                • MD5 SHA1 SHA512 TLSH

                                metadata.json

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                • Size 684B
                                • SHA256 c9a591218b6a10fedfd1b1415620618b4cd7aa607b8cd025437ae73cfc1b1448
                                • MD5 SHA1 SHA512 TLSH

                                metadata.json

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                • Size 348B
                                • SHA256 fbaca5f78da57c738243f4bcf5943645ee9c6e4e56458c8f46ab1bcedfb0731c
                                • MD5 SHA1 SHA512 TLSH

                                metadata.json

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                • Size 236B
                                • SHA256 c66636afe28ab8e6b709d8c9d0c663dc7e989dbedb8ea0264dbf35138515d4b4
                                • MD5 SHA1 SHA512 TLSH

                                metadata.json

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                • Size 124B
                                • SHA256 42dc5689279765d5204eae760cb625510863a8cec862a2375f042ad1b5819351
                                • MD5 SHA1 SHA512 TLSH

                                metadata.json

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                • Size 13B
                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                • MD5 SHA1 SHA512

                                metadata.json

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                • Size 796B
                                • SHA256 0b822bb7150fddc63ffcf067370de16729cecac88042010ac5bc0f062ea5d7a2
                                • MD5 SHA1 SHA512 TLSH

                                metadata.json

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                • Size 460B
                                • SHA256 9e7fdcf0a3e68b62cfe11fa64bc05bc1b3a44125cf925f9339c2b2ba8be6cc9d
                                • MD5 SHA1 SHA512 TLSH

                                metadata.json

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                • Size 572B
                                • SHA256 2bbdf9b084b4c640228323b1acf879ea12381e76d81415d7cdb328d281177901
                                • MD5 SHA1 SHA512 TLSH

                                metadata.json

                                • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\component_crx_cache\metadata.json
                                • Size 908B
                                • SHA256 335f7f506ac40af4f7d7a2d4f16f593e42343092e1136182b7e0fa6d13cc57bd
                                • MD5 SHA1 SHA512 TLSH

                                memory/4036-2248-0x0000027DE5390000-0x0000027DE5AB9000-memory.dmp

                                memory/5540-469-0x00007FFF13EE0000-0x00007FFF13EE1000-memory.dmp

                                memory/5540-468-0x00007FFF128D0000-0x00007FFF128D1000-memory.dmp

                                memory/8004-5460-0x00000249640F0000-0x00000249640F1000-memory.dmp

                                memory/8004-5471-0x00000249640F0000-0x00000249640F1000-memory.dmp

                                memory/8004-5470-0x00000249640F0000-0x00000249640F1000-memory.dmp

                                memory/8004-5469-0x00000249640F0000-0x00000249640F1000-memory.dmp

                                memory/8004-5467-0x00000249640F0000-0x00000249640F1000-memory.dmp

                                memory/8004-5461-0x00000249640F0000-0x00000249640F1000-memory.dmp

                                memory/8004-5466-0x00000249640F0000-0x00000249640F1000-memory.dmp

                                memory/8004-5462-0x00000249640F0000-0x00000249640F1000-memory.dmp

                                memory/8004-5472-0x00000249640F0000-0x00000249640F1000-memory.dmp

                                memory/8004-5468-0x00000249640F0000-0x00000249640F1000-memory.dmp