Overview

overview

6

Static

static

1

tmprc1gl313.exe

windows10-ltsc_2021-x64

6

tmprc1gl313.exe

windows10-2004-x64

4

tmprc1gl313.exe

windows11-21h2-x64

6

Analysis

  • max time kernel
    132s
  • max time network
    149s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    02/07/2026, 12:35

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    tmprc1gl313.exe
  • Size 178KB
  • Sample260702-psrdvaas8v
  • SHA256 20b545c7b0b0cb56926972b7fc2a94f428b7aa3e4f9f4e65d1bd0ad800fb60b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwaredefense_evasiondiscoverypersistenceprivilege_escalationspywarestealertrojan

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 3 IoCs
    persistence
  • Enumerates connected drives 3 TTPs 6 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Windows directory 10 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 64 IoCs
  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 44 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs
  • Suspicious use of AdjustPrivilegeToken 28 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\tmprc1gl313.exe
    "C:\Users\Admin\AppData\Local\Temp\tmprc1gl313.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3396
    • C:\Users\Admin\AppData\Local\Temp\OpInst.exe
      "C:\Users\Admin\AppData\Local\Temp\OpInst.exe" --silent --allusers=0 --setdefaultbrowser=1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:5000
      • C:\Users\Admin\AppData\Local\Temp\7zS88348648\installer.exe
        C:\Users\Admin\AppData\Local\Temp\7zS88348648\installer.exe --silent --allusers=0 --setdefaultbrowser=1 --server-tracking-blob=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
        3⤵
        • Enumerates connected drives
        • Executes dropped EXE
        • Enumerates system info in registry
        • Modifies system certificate store
        • Suspicious use of WriteProcessMemory
        PID:2444
        • C:\Users\Admin\AppData\Local\Temp\7zS88348648\installer.exe
          C:\Users\Admin\AppData\Local\Temp\7zS88348648\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x288,0x28c,0x290,0x264,0x294,0x7ff7b58dad88,0x7ff7b58dad94,0x7ff7b58dada0
          4⤵
          • Executes dropped EXE
          PID:1120
        • C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\installer.exe" --version
          4⤵
          • Executes dropped EXE
          PID:2724
        • C:\Users\Admin\AppData\Local\Temp\7zS88348648\installer.exe
          "C:\Users\Admin\AppData\Local\Temp\7zS88348648\installer.exe" --backend --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --show-intro-overlay --server-tracking-data=server_tracking_data --initial-pid=2444 --package-dir-prefix="C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_20260702133554" --session-guid=305f42be-8810-4757-9e20-48900dab6ac5 --server-tracking-blob=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 --silent --desktopshortcut=1 --wait-for-package --initial-proc-handle=B007000000000000
          4⤵
          • Enumerates connected drives
          • Executes dropped EXE
          • Enumerates system info in registry
          • Suspicious use of WriteProcessMemory
          PID:1160
          • C:\Users\Admin\AppData\Local\Temp\7zS88348648\installer.exe
            C:\Users\Admin\AppData\Local\Temp\7zS88348648\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x294,0x298,0x29c,0x264,0x2a0,0x7ff7b58dad88,0x7ff7b58dad94,0x7ff7b58dada0
            5⤵
            • Executes dropped EXE
            PID:2428
          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\installer.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\installer.exe" --backend --initial-pid=2444 --install --import-browser-data=0 --enable-crash-reporting=1 --enable-stats=1 --enable-installer-stats=1 --consent-given=0 --general-interests=0 --general-location=0 --personalized-content=0 --personalized-ads=0 --launchopera=1 --showunbox=0 --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera" --profile-folder --language=en --singleprofile=0 --copyonly=0 --allusers=0 --setdefaultbrowser=1 --pintotaskbar=1 --pintostartmenu=0 --run-at-startup=1 --server-tracking-data=server_tracking_data --show-intro-overlay --package-dir="C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541" --session-guid=305f42be-8810-4757-9e20-48900dab6ac5 --server-tracking-blob=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 --silent --desktopshortcut=1 --install-subfolder=133.0.5932.20
            5⤵
            • Enumerates connected drives
            • Executes dropped EXE
            • Modifies registry class
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:3040
            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\installer.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff6e59aad88,0x7ff6e59aad94,0x7ff6e59aada0
              6⤵
              • Executes dropped EXE
              PID:1988
            • C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\assistant\assistant_installer.exe
              "C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --copyonly=0 --allusers=0
              6⤵
              • Adds Run key to start application
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Enumerates system info in registry
              • Modifies Internet Explorer settings
              • Suspicious use of WriteProcessMemory
              PID:4836
              • C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0xc94040,0xc9404c,0xc94058
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:4508
              • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe" --installfolder="C:\Users\Admin\AppData\Local\Programs\Opera\assistant" --run-assistant --allusers=0
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Enumerates system info in registry
                • Suspicious use of WriteProcessMemory
                PID:4968
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe
                  C:\Users\Admin\AppData\Local\Programs\Opera\assistant\assistant_installer.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x23c,0x240,0x244,0x210,0x248,0x11a4040,0x11a404c,0x11a4058
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:1532
                • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe"
                  8⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  • Enumerates system info in registry
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of SendNotifyMessage
                  • Suspicious use of WriteProcessMemory
                  PID:4896
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Enumerates system info in registry
                    • Suspicious use of WriteProcessMemory
                    PID:5044
                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x150bd7b3fe0,0x150bd7b3ff0,0x150bd7b4000
                      10⤵
                      • Executes dropped EXE
                      PID:4116
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • Suspicious use of WriteProcessMemory
                    PID:5788
                    • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                      C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x1d20f9c3fe0,0x1d20f9c3ff0,0x1d20f9c4000
                      10⤵
                      • Executes dropped EXE
                      PID:5316
                  • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x288,0x28c,0x290,0x240,0x294,0xf6c830,0xf6c83c,0xf6c848
                    9⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:2364
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:5504
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x28af5c23fe0,0x28af5c23ff0,0x28af5c24000
                        11⤵
                        • Executes dropped EXE
                        PID:3068
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Suspicious use of WriteProcessMemory
                      PID:5288
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x1729d703fe0,0x1729d703ff0,0x1729d704000
                        11⤵
                        • Executes dropped EXE
                        PID:4240
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
                      10⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      • Enumerates system info in registry
                      • Suspicious use of WriteProcessMemory
                      PID:5796
                      • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                        C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x20e21c53fe0,0x20e21c53ff0,0x20e21c54000
                        11⤵
                        • Executes dropped EXE
                        PID:2600
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\de932af914ba00303d4a2778a383ac9c831101e2.crx"
              6⤵
              • Adds Run key to start application
              • Drops file in Windows directory
              • Executes dropped EXE
              • Loads dropped DLL
              • Checks processor information in registry
              • Enumerates system info in registry
              • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:4032
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x2f89a8b3fe0,0x2f89a8b3ff0,0x2f89a8b4000
                7⤵
                • Executes dropped EXE
                PID:3636
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1736,i,576476291182768607,16418860459602710968,262144 --field-trial-handle=1424,i,7851306892965926090,12414329833368347934,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1896,i,13802041073177266647,9082133298829883472,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1892 /prefetch:2
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5768
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2068,i,2254538880220259092,2150293229307947164,524288 --field-trial-handle=1424,i,7851306892965926090,12414329833368347934,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1896,i,13802041073177266647,9082133298829883472,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2072 /prefetch:11
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Time Discovery
                • Enumerates system info in registry
                PID:6080
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2460,i,3163384289463644719,2851670983297766979,524288 --field-trial-handle=1424,i,7851306892965926090,12414329833368347934,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1896,i,13802041073177266647,9082133298829883472,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2536 /prefetch:13
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5204
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3436,i,16472036850873868608,15336848122042656943,2097152 --field-trial-handle=1424,i,7851306892965926090,12414329833368347934,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1896,i,13802041073177266647,9082133298829883472,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3440 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:5396
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=2352,i,16734056917470122921,13956898154310813442,2097152 --field-trial-handle=1424,i,7851306892965926090,12414329833368347934,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1896,i,13802041073177266647,9082133298829883472,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3908 /prefetch:9
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5612
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4224,i,14643430203079361892,1481534502976246539,524288 --field-trial-handle=1424,i,7851306892965926090,12414329833368347934,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1896,i,13802041073177266647,9082133298829883472,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4256 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:1280
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4264,i,11761131520552421953,8439589593338417661,524288 --field-trial-handle=1424,i,7851306892965926090,12414329833368347934,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1896,i,13802041073177266647,9082133298829883472,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4480 /prefetch:12
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:240
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4060,i,9209023387299541365,5989131417809445162,524288 --field-trial-handle=1424,i,7851306892965926090,12414329833368347934,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1896,i,13802041073177266647,9082133298829883472,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4700 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Enumerates system info in registry
                PID:4448
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=4736,i,7463262332786385832,9693263784866797800,2097152 --field-trial-handle=1424,i,7851306892965926090,12414329833368347934,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1896,i,13802041073177266647,9082133298829883472,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4788 /prefetch:9
                7⤵
                • Executes dropped EXE
                PID:2524
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --video-capture-use-gpu-memory-buffer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=4468,i,12734119986483147,15355240189288525912,524288 --field-trial-handle=1424,i,7851306892965926090,12414329833368347934,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=1896,i,13802041073177266647,9082133298829883472,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5024 /prefetch:14
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:5052
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --ran-launcher --install-extension="C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\additional_file2.tmp"
              6⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              PID:2500
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x274,0x278,0x27c,0x270,0x280,0x1bbdf913fe0,0x1bbdf913ff0,0x1bbdf914000
                7⤵
                  PID:5148
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --show-intro-overlay --start-maximized
                6⤵
                  PID:1036
                  • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                    C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x27c,0x280,0x284,0x278,0x288,0x1f941d93fe0,0x1f941d93ff0,0x1f941d94000
                    7⤵
                      PID:6996
              • C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\assistant\Assistant_130.0.5847.41_Setup.exe_sfx.exe"
                4⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:5876
              • C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\assistant\assistant_installer.exe
                "C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\assistant\assistant_installer.exe" --version
                4⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                • Suspicious use of WriteProcessMemory
                PID:5348
                • C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\assistant\assistant_installer.exe
                  "C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\assistant\assistant_installer.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x234,0x238,0x23c,0x210,0x240,0xc94040,0xc9404c,0xc94058
                  5⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • System Location Discovery: System Language Discovery
                  PID:1236
        • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
          C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
          1⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Enumerates system info in registry
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of WriteProcessMemory
          PID:5100
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
            2⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Suspicious use of WriteProcessMemory
            PID:944
            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x2bd2d303fe0,0x2bd2d303ff0,0x2bd2d304000
              3⤵
              • Executes dropped EXE
              PID:2576
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
            2⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Suspicious use of WriteProcessMemory
            PID:1752
            • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
              C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x186dd943fe0,0x186dd943ff0,0x186dd944000
              3⤵
              • Executes dropped EXE
              PID:1580
          • C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
            C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win32 --annotation=prod=OperaDesktop --annotation=ver=130.0.5847.41 --initial-client-data=0x288,0x28c,0x290,0x25c,0x294,0xf6c830,0xf6c83c,0xf6c848
            2⤵
            • Executes dropped EXE
            • System Location Discovery: System Language Discovery
            • Suspicious use of WriteProcessMemory
            PID:6276
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
              3⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              • Suspicious use of WriteProcessMemory
              PID:6296
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x1ac8f9c3fe0,0x1ac8f9c3ff0,0x1ac8f9c4000
                4⤵
                • Executes dropped EXE
                PID:6480
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
              3⤵
              • Executes dropped EXE
              • Suspicious use of WriteProcessMemory
              PID:7248
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x2274b313fe0,0x2274b313ff0,0x2274b314000
                4⤵
                • Executes dropped EXE
                PID:7288
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --stream
              3⤵
              • Executes dropped EXE
              • Enumerates system info in registry
              • Suspicious use of WriteProcessMemory
              PID:5800
              • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
                C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x278,0x27c,0x280,0x274,0x284,0x1e836c43fe0,0x1e836c43ff0,0x1e836c44000
                4⤵
                • Executes dropped EXE
                PID:3740
        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --autostart
          1⤵
          • Adds Run key to start application
          • Drops file in Windows directory
          • Executes dropped EXE
          • Checks processor information in registry
          • Enumerates system info in registry
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:7260
          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe
            C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_crashreporter.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x280,0x284,0x288,0x27c,0x28c,0x2c6c4203fe0,0x2c6c4203ff0,0x2c6c4204000
            2⤵
            • Executes dropped EXE
            PID:6244
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1648,i,16194203677365818730,8348690704867566316,262144 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2044 /prefetch:2
            2⤵
            • Executes dropped EXE
            • Enumerates system info in registry
            PID:8020
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=1912,i,8976475664603577157,12981539872035671265,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2084 /prefetch:11
            2⤵
            • Executes dropped EXE
            • System Time Discovery
            • Enumerates system info in registry
            PID:8028
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=2476,i,4702826937611514560,7779368184214457559,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2556 /prefetch:13
            2⤵
            • Executes dropped EXE
            • Enumerates system info in registry
            PID:2208
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3076,i,1196301927333484669,14688404967895113588,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3108 /prefetch:14
            2⤵
            • Executes dropped EXE
            • Enumerates system info in registry
            PID:2044
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3140,i,7990185915870379561,8106142448650023280,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=3216 /prefetch:14
            2⤵
            • Executes dropped EXE
            • Enumerates system info in registry
            PID:1504
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3172,i,6301502427708440955,17661061953099127114,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=3248 /prefetch:14
            2⤵
            • Executes dropped EXE
            • Enumerates system info in registry
            PID:1624
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3204,i,3113339957830180498,16693540126141145245,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=3272 /prefetch:14
            2⤵
            • Executes dropped EXE
            • Enumerates system info in registry
            PID:2928
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3100,i,7765764761754951717,6760840871456997911,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3152 /prefetch:14
            2⤵
            • Executes dropped EXE
            PID:5312
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3224,i,13394831429391741882,11176649636959186390,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=3292 /prefetch:14
            2⤵
            • Executes dropped EXE
            • Enumerates system info in registry
            PID:2616
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3124,i,1329926990913282247,16078819227875978412,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3184 /prefetch:14
            2⤵
            • Executes dropped EXE
            PID:2144
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3892,i,5617613802154792816,2294936859857576876,2097152 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=4148 /prefetch:1
            2⤵
            • Enumerates system info in registry
            PID:4840
          • C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_gx_splash.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\opera_gx_splash.exe" --instance-name=62918497600F2E2DAF77EF23BF7DF68528BAE39ED3F6DE8A384301C64F4D5C96
            2⤵
            • Modifies registry class
            • Suspicious use of AdjustPrivilegeToken
            PID:5124
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4680,i,1744771215980097459,658716871305727987,2097152 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4692 /prefetch:1
            2⤵
            • Enumerates system info in registry
            PID:6520
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4964,i,10654216924771882364,16631310316643846496,2097152 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=4980 /prefetch:9
            2⤵
            • Enumerates system info in registry
            PID:6552
          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4672,i,9459156120950229842,4852306465518936026,2097152 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5160 /prefetch:1
            2⤵
              PID:6608
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5288,i,1980896307488075660,7991920581187454819,2097152 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5304 /prefetch:1
              2⤵
              • Enumerates system info in registry
              PID:6612
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5904,i,9880468595889455958,13334412475350907490,2097152 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5452 /prefetch:1
              2⤵
              • Enumerates system info in registry
              PID:6796
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6488,i,7709248010398265332,7055964996380179691,2097152 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6560 /prefetch:9
              2⤵
              • Enumerates system info in registry
              PID:6816
            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6020,i,7855852985764547563,5366555046591554179,2097152 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=6896 /prefetch:9
              2⤵
                PID:4948
              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6960,i,2159341026386068172,10190982825058799396,2097152 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7112 /prefetch:9
                2⤵
                  PID:5608
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7332,i,14947430913759045062,2809912669924191538,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7360 /prefetch:14
                  2⤵
                  • Enumerates system info in registry
                  PID:7648
                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7336,i,13076558621356904106,759005483576716219,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7380 /prefetch:14
                  2⤵
                    PID:7656
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7392,i,10075093456879293269,7831763567810614008,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7660 /prefetch:14
                    2⤵
                    • Enumerates system info in registry
                    PID:7696
                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7640,i,91435480251150144,6035543763654044445,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=7720 /prefetch:14
                    2⤵
                      PID:7744
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7648,i,13918593929168163656,8553777853495425810,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7740 /prefetch:14
                      2⤵
                      • Enumerates system info in registry
                      PID:7832
                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7624,i,15632415985178262141,13887805014842062,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7680 /prefetch:14
                      2⤵
                        PID:6220
                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=7632,i,15511765331430154414,17631766362538323534,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7700 /prefetch:14
                        2⤵
                          PID:2396
                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8144,i,16956447543169209448,3072808889464202575,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8160 /prefetch:14
                          2⤵
                            PID:3344
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8164,i,5513017287997434558,15188712036617475328,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8188 /prefetch:14
                            2⤵
                            • Enumerates system info in registry
                            PID:5976
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8228,i,13414030949130573550,4499602467185192107,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=8140 /prefetch:14
                            2⤵
                            • Enumerates system info in registry
                            PID:4796
                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8440,i,6047615000147537767,76962929831272318,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8464 /prefetch:14
                            2⤵
                              PID:8140
                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8700,i,17573221155121643714,9412610536707325167,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8712 /prefetch:14
                              2⤵
                                PID:3996
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8720,i,17618603406760773112,4350623708324934759,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8740 /prefetch:14
                                2⤵
                                • Enumerates system info in registry
                                PID:2812
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=8984,i,14374084885877466893,9267466937764612787,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8996 /prefetch:14
                                2⤵
                                • Enumerates system info in registry
                                PID:1744
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9200,i,10137220034448203076,18416753705693746564,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=9204 /prefetch:14
                                2⤵
                                • Enumerates system info in registry
                                PID:3736
                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9348,i,6969426759318432225,2148580846639881134,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=9360 /prefetch:14
                                2⤵
                                  PID:2524
                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9384,i,17284553521892765045,2921024805144681319,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9396 /prefetch:14
                                  2⤵
                                    PID:8144
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9504,i,2292109942808672691,9280991022097441367,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=9448 /prefetch:12
                                    2⤵
                                    • Enumerates system info in registry
                                    PID:1284
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9656,i,6519264338593000997,18300988680474405763,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=9644 /prefetch:14
                                    2⤵
                                    • Enumerates system info in registry
                                    PID:5240
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=9676,i,12447042582520121895,1357624991471736815,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=9796 /prefetch:14
                                    2⤵
                                    • Enumerates system info in registry
                                    PID:5768
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --metrics-shmem-handle=9960,i,12665246056664670918,14135344388414418223,2097152 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=9832 /prefetch:9
                                    2⤵
                                    • Enumerates system info in registry
                                    PID:2268
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10116,i,12035340661241664860,9356998563518807610,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=10124 /prefetch:14
                                    2⤵
                                    • Enumerates system info in registry
                                    PID:4720
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10144,i,2006468145344930656,8770576005043964396,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10276 /prefetch:14
                                    2⤵
                                    • Enumerates system info in registry
                                    PID:6400
                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10256,i,14094703605931007046,16349954132362817480,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=10260 /prefetch:14
                                    2⤵
                                      PID:6788
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=10560,i,4718764828862189556,789022689444410212,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=10568 /prefetch:14
                                      2⤵
                                      • Enumerates system info in registry
                                      PID:6776
                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --metrics-shmem-handle=10760,i,6117029386592083107,12253889410903472033,2097152 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=10812 /prefetch:1
                                      2⤵
                                        PID:6980
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --metrics-shmem-handle=11392,i,15858636890727707551,11751969240410118196,2097152 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=10748 /prefetch:1
                                        2⤵
                                        • Enumerates system info in registry
                                        PID:6676
                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                        "C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe" --user-data-dir="C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" --pipeid=oauc_pipe829C77C52C50D24864A73C891B28976EA11A30DB7D0D3F744418ADB97BE7F161
                                        2⤵
                                          PID:6196
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                            C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x284,0x288,0x28c,0x260,0x290,0x7ff609218860,0x7ff60921886c,0x7ff609218878
                                            3⤵
                                              PID:8528
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11552,i,13700617711365634727,15033076063377229264,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=11360 /prefetch:14
                                            2⤵
                                            • Enumerates system info in registry
                                            PID:6808
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11720,i,6780787070426216552,6822160761470405250,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=11716 /prefetch:14
                                            2⤵
                                            • Enumerates system info in registry
                                            PID:7020
                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11968,i,10794717771772436695,15277077330098572645,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=11980 /prefetch:14
                                            2⤵
                                              PID:8960
                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12112,i,4609607856822197385,14621986821103969005,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=12124 /prefetch:14
                                              2⤵
                                                PID:9032
                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=10692,i,11892541274490653760,2925019138241821146,2097152 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=11796 /prefetch:1
                                                2⤵
                                                  PID:6420
                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=11944,i,4123304945374339934,3898453028708865556,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=4268 /prefetch:14
                                                  2⤵
                                                    PID:7932
                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                    "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12168,i,2432013120889630371,8291305892354085972,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=12232 /prefetch:14
                                                    2⤵
                                                      PID:3308
                                                    • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                      "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12016,i,15872994286713838482,8600098056752866159,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=11964 /prefetch:14
                                                      2⤵
                                                        PID:8128
                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                        "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=5516,i,1098804325382778241,6011715429236382504,2097152 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=7908 /prefetch:9
                                                        2⤵
                                                          PID:420
                                                        • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                          "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3484,i,18158217682366560927,6342889141389069930,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=5596 /prefetch:14
                                                          2⤵
                                                            PID:6316
                                                          • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                            "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=3084,i,7522557790817696802,16203990084657660239,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=5608 /prefetch:14
                                                            2⤵
                                                              PID:5084
                                                            • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                              "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12088,i,768863670372142538,5835852622096549815,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=12244 /prefetch:14
                                                              2⤵
                                                                PID:8468
                                                              • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --enable-quic --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --metrics-shmem-handle=12236,i,17009182073798203676,8515464696247053192,524288 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=12028 /prefetch:14
                                                                2⤵
                                                                  PID:8948
                                                                • C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                  "C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe" --type=renderer --extension-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --with-feature:address-bar-dropdown-cities=on --with-feature:address-bar-dropdown-keyword-ads=on --with-feature:ai-tab-management=on --with-feature:audio-analysis=on --with-feature:bluesky-in-sidebar=on --with-feature:cashback-assistant=on --with-feature:certificate-transparency-enforcement=on --with-feature:cms-tracking-rules=on --with-feature:discord-in-sidebar=on --with-feature:domain-suggestions-confidence-scoring=off --with-feature:domain-suggestions-vertical-suggestions=on --with-feature:early-bird=on --with-feature:feature-remote-disable-updates-testing-flag=off --with-feature:feature-remote-updates-testing-flag=on --with-feature:hide-navigations-from-extensions=on --with-feature:installer-experiment-test=off --with-feature:installer-move-opera-exe=off --with-feature:installer-verify-ipc-client=off --with-feature:new-auto-pip-for-documents=on --with-feature:new-auto-pip-for-video=on --with-feature:opera-one-unskippable-introduction=on --with-feature:opera-startpage-special-2=off --with-feature:proxy-switcher-ui-default-visible=on --with-feature:run-at-startup-default=on --with-feature:sd-suggestions-external=on --with-feature:session-restore-add-amazon-attributions=off --with-feature:sitecheck-age=on --with-feature:slack-in-sidebar=on --with-feature:specific-keywords=on --with-feature:startpage-opening-animation=off --with-feature:startpage-sync-banner=on --with-feature:startup-campaigns=on --with-feature:translator=on --with-feature:vpn-pro-v4-support=on --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=12168,i,16366910936881945890,16229257740228553464,2097152 --field-trial-handle=2052,i,7778213018983702479,8694137630274007601,262144 --enable-features=AutoPictureInPictureForVideoPlayback,AutoPictureInPictureVideoHeuristics,CertificateTransparencyAskBeforeEnabling,MultiThreadedUiCompositor,NativeNotifications,SystemNotifications --disable-features=SkiaGraphite,SyncWorkspacesInSessions --variations-seed-version --pseudonymization-salt-handle=2056,i,2676169420444787110,2116851812115338898,4 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=5584 /prefetch:9
                                                                  2⤵
                                                                    PID:3004
                                                                • C:\Windows\system32\wbem\unsecapp.exe
                                                                  C:\Windows\system32\wbem\unsecapp.exe -Embedding
                                                                  1⤵
                                                                    PID:7372
                                                                  • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                    C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --scheduledtask --requesttype=automatic --scheduledtask --pipeid=oauc_task_pipe8568FD7CD38622B8DFBB9DE3BFCE1D28A3A1856C28EF1A9FCC4C666E10A82BC1
                                                                    1⤵
                                                                      PID:5992
                                                                      • C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                        C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports" "--crash-count-file=C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\crash_count.txt" --url=https://crashstats-collector-2.opera.com/ --annotation=channel=Stable --annotation=plat=Win64 --annotation=prod=OperaDesktop --annotation=ver=133.0.5932.20 --initial-client-data=0x280,0x284,0x288,0x218,0x28c,0x7ff609218860,0x7ff60921886c,0x7ff609218878
                                                                        2⤵
                                                                          PID:8608
                                                                        • C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe
                                                                          "C:\Users\Admin\AppData\Local\Temp\.opera\72A8C838D015\installer.exe" --version
                                                                          2⤵
                                                                            PID:7228

                                                                        Network

                                                                              MITRE ATT&CK Enterprise v16

                                                                              Reconnaissance

                                                                              Resource Development

                                                                              Initial Access

                                                                              Execution

                                                                              Persistence

                                                                              Boot or Logon Autostart Execution

                                                                              1
                                                                              T1547

                                                                              Registry Run Keys / Startup Folder

                                                                              1
                                                                              T1547.001

                                                                              Event Triggered Execution

                                                                              1
                                                                              T1546

                                                                              Component Object Model Hijacking

                                                                              1
                                                                              T1546.015

                                                                              Privilege Escalation

                                                                              Boot or Logon Autostart Execution

                                                                              1
                                                                              T1547

                                                                              Registry Run Keys / Startup Folder

                                                                              1
                                                                              T1547.001

                                                                              Event Triggered Execution

                                                                              1
                                                                              T1546

                                                                              Component Object Model Hijacking

                                                                              1
                                                                              T1546.015

                                                                              Defense Evasion

                                                                              Modify Registry

                                                                              3
                                                                              T1112

                                                                              Subvert Trust Controls

                                                                              1
                                                                              T1553

                                                                              Install Root Certificate

                                                                              1
                                                                              T1553.004

                                                                              Credential Access

                                                                              Credentials from Password Stores

                                                                              1
                                                                              T1555

                                                                              Credentials from Web Browsers

                                                                              1
                                                                              T1555.003

                                                                              Unsecured Credentials

                                                                              1
                                                                              T1552

                                                                              Credentials In Files

                                                                              1
                                                                              T1552.001

                                                                              Discovery

                                                                              Peripheral Device Discovery

                                                                              1
                                                                              T1120

                                                                              Query Registry

                                                                              5
                                                                              T1012

                                                                              System Information Discovery

                                                                              4
                                                                              T1082

                                                                              System Location Discovery

                                                                              1
                                                                              T1614

                                                                              System Language Discovery

                                                                              1
                                                                              T1614.001

                                                                              System Time Discovery

                                                                              1
                                                                              T1124

                                                                              Lateral Movement

                                                                              Collection

                                                                              Data from Local System

                                                                              1
                                                                              T1005

                                                                              Command and Control

                                                                              Exfiltration

                                                                              Impact

                                                                              Replay Monitor

                                                                              Loading Replay Monitor...

                                                                              Downloads

                                                                              8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                              • Size 1KB
                                                                              • SHA256 71ccd39de69ec147afd8ad4337a36829dcababbf40897250380c7770de551242
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              B46811C17859FFB409CF0E904A4AA8F8
                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8
                                                                              • Size 528B
                                                                              • SHA256 d2bb091268ade68ad8121d2184d0fbce128070156304bd4de312e6fbd267409c
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                              • Size 471B
                                                                              • SHA256 4b00900886fc53df65f90f9bf7c1bc61d8e9588c8fb660ce2b57f89c4ba977f7
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12
                                                                              • Size 174B
                                                                              • SHA256 a76f3a5d17193afa71b07c8afa4f1ceb9145eff6ba75c46c25b7d80b23853955
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              B46811C17859FFB409CF0E904A4AA8F8
                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
                                                                              • Size 170B
                                                                              • SHA256 27eb31830362dec8ad92a405850274bf03174a9abafe047d44297d9c4173066f
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                              • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E2C6CBAF0AF08CF203BA74BF0D0AB6D5_CB77E3D8FE906716C4DEE1FAFFCB74A5
                                                                              • Size 416B
                                                                              • SHA256 fa82d198191fb71215bec1628dc9c6021e15f0f99594fcb0d408428869a19fb5
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              f_000001
                                                                              • Path C:\Users\Admin\AppData\Local\Opera Software\Opera Stable\Default\System Cache\Cache_Data\f_000001
                                                                              • Size 162KB
                                                                              • SHA256 631aa0e1ea0ba032b05caffcc3c03ab91bacb4c3c2c0adc612e791925d28bd4a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              133.0.5932.20.manifest
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\133.0.5932.20.manifest
                                                                              • Size 225B
                                                                              • SHA256 96eb02fb002deff259d109ef33c4dbab24a00a4fc27f828b2290a46ff7186f9c
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              150x150Logo.scale-100.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\150x150Logo.scale-100.png
                                                                              • Size 1KB
                                                                              • SHA256 56bcd46dcfae3147a8b8b3d00ee5041dad4655e83a7e829bf637377c96538643
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              150x150Logo.scale-100_contrast-white.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\150x150Logo.scale-100_contrast-white.png
                                                                              • Size 1KB
                                                                              • SHA256 3829dbefe8bd528be268f3181a902e1fe78883eb8f8aac679c9985c2ad13c6b9
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              150x150Logo.scale-140.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\150x150Logo.scale-140.png
                                                                              • Size 1KB
                                                                              • SHA256 2637072751e1e6398c45d2c5b22c54adadfbbd4d3007238799f5da63f846167b
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              150x150Logo.scale-140_contrast-white.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\150x150Logo.scale-140_contrast-white.png
                                                                              • Size 1KB
                                                                              • SHA256 ce3559b2efd6d547fb822440690cfbf793eb70c98154ad4dbf3a7c0e1af5e166
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              150x150Logo.scale-180.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\150x150Logo.scale-180.png
                                                                              • Size 1KB
                                                                              • SHA256 7ca510381079a4b166e9d5fcf0dc005d9606197e8636621b655d6459941139a0
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              150x150Logo.scale-180_contrast-white.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\150x150Logo.scale-180_contrast-white.png
                                                                              • Size 1KB
                                                                              • SHA256 f7eb888cd9bce4641fcb01088b05be242f616dc06c3f823e51fb63b53b6f14f5
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              150x150Logo.scale-80.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\150x150Logo.scale-80.png
                                                                              • Size 827B
                                                                              • SHA256 f287370ff8c7e2ba120407cafe09c1fce674ae8af5bd5fcc0c2dd1c6628b9ce9
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              150x150Logo.scale-80_contrast-white.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\150x150Logo.scale-80_contrast-white.png
                                                                              • Size 799B
                                                                              • SHA256 0a9129bde051c17e96e516d5bc509e1a06a1e066a5e2796627cbef8630002b47
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              70x70Logo.scale-100.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\70x70Logo.scale-100.png
                                                                              • Size 781B
                                                                              • SHA256 fb5662c5fde7d49862da2e0253ae03dc7e5f9afd2edc65d4efa6dc3a3026156f
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              70x70Logo.scale-100_contrast-white.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\70x70Logo.scale-100_contrast-white.png
                                                                              • Size 752B
                                                                              • SHA256 3fa9dfc982544f3ffda0795beec69c65d6c5883be0de37133466e643b5f3aeea
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              70x70Logo.scale-140.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\70x70Logo.scale-140.png
                                                                              • Size 991B
                                                                              • SHA256 84f8ebb629791e0b73cd53d7f3445d685145d0787a207e25842b237c98a8c99a
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              70x70Logo.scale-140_contrast-white.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\70x70Logo.scale-140_contrast-white.png
                                                                              • Size 865B
                                                                              • SHA256 99cd2b5809ab9c604613b305bc80e6f68b858c1289c07e84aadabc4c3768ff32
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              70x70Logo.scale-180.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\70x70Logo.scale-180.png
                                                                              • Size 1KB
                                                                              • SHA256 c5d33ee3b5e8dcb9e9aeae5f14d0e92cf9bdc16d6245ce65dd4340c8a0be4f26
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              70x70Logo.scale-180_contrast-white.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\70x70Logo.scale-180_contrast-white.png
                                                                              • Size 1KB
                                                                              • SHA256 e5112331e0e2684ffb5adc0ac23324d9836cf067111f1f5834c77b1153a8a5d7
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              70x70Logo.scale-80.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\70x70Logo.scale-80.png
                                                                              • Size 590B
                                                                              • SHA256 91ba72309e34c5336c09b8f5c787a6327082f275d5d7bfe491c5430e67c80752
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              70x70Logo.scale-80_contrast-white.png
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\Assets\70x70Logo.scale-80_contrast-white.png
                                                                              • Size 519B
                                                                              • SHA256 37b0f1fb4a08af8a42e6d8fce4c7380ddae0272150d7a9bb8b1d138066a9ffbe
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              assistant_package
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\assistant_package
                                                                              • Size 3.6MB
                                                                              • SHA256 71000aefbbef427fc6c0e20d8f8cbad0c70dc6eefd95f6e90c7fc1f43d2ad0e7
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              d3dcompiler_47.dll
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\d3dcompiler_47.dll
                                                                              • Size 4.5MB
                                                                              • SHA256 de25d109d46273045207b504443d5730aadf6b5a7fe1978043dac4d3e638ea65
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              dxcompiler.dll
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\dxcompiler.dll
                                                                              • Size 24.4MB
                                                                              • SHA256 90fb45ff598d7e24cfffef07924de8159ec6de15a08a8f075c187442f95cb217
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              dxil.dll
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\dxil.dll
                                                                              • Size 1.5MB
                                                                              • SHA256 3cb1f2c44f376ecfb64f23021776f633375ec2b42b99844f8fef4686164d1cae
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              files_list
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\files_list
                                                                              • Size 6KB
                                                                              • SHA256 04356be072ab31fb5ce09d26bb1d8bb664c7334883a2e6157238cdd97979e97b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              headless_command_resources.pak
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\headless_command_resources.pak
                                                                              • Size 2KB
                                                                              • SHA256 9337d260af693284e85d353db0926beb9932412c268558f447c74e5064bd6a3f
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              icudtl.dat
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\icudtl.dat
                                                                              • Size 10.4MB
                                                                              • SHA256 d0a05dcc74a5b6ce1657a2ae44a58c0df03a1a07c24a4df2e3381353911382fc
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              installer.exe
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\installer.exe
                                                                              • Size 8.3MB
                                                                              • SHA256 c006f335efec016cf3d381a3a89d1692bdd27f5994b7f283e7619386367ae002
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              installer_helper_64.exe
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\installer_helper_64.exe
                                                                              • Size 639KB
                                                                              • SHA256 55c0cd782af626adcf9bf144ef26528e598e8c8efcd60372ab2e43b65881129c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              libEGL.dll
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\libEGL.dll
                                                                              • Size 492KB
                                                                              • SHA256 24e5c900d1a8bebe2092480a2c0d5f8fd093af76b939b16d51fde1a276bef579
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              libGLESv2.dll
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\libGLESv2.dll
                                                                              • Size 7.5MB
                                                                              • SHA256 2eff13a97dbe96393088f714d22b59be2be88973062f27ef21282fc35aedf815
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              bg.pak
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\localization\bg.pak
                                                                              • Size 1005KB
                                                                              • SHA256 8a151c2685798e8c559c4329496eac4845b23bf977c1f10fa97e452617179036
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              bn.pak
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\localization\bn.pak
                                                                              • Size 1.3MB
                                                                              • SHA256 75b433bac6b07c87874885f87d38d6a87dab684310611072e880ea157cebf967
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              ca.pak
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\localization\ca.pak
                                                                              • Size 634KB
                                                                              • SHA256 951a872c07a86b56273a468472edc64ff1fd3072ee92f1b747c2d56862266e9a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              cs.pak
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\localization\cs.pak
                                                                              • Size 633KB
                                                                              • SHA256 1ad3a061c4efeb9719caff31b374f2c7461bbf26dfa83d23378f7d146d6a2961
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              da.pak
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\localization\da.pak
                                                                              • Size 584KB
                                                                              • SHA256 2bce9052d3537685476b030689ddd793045e5d173201192455753a374903a5d3
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              de.pak
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\133.0.5932.20\localization\de.pak
                                                                              • Size 631KB
                                                                              • SHA256 a80aa856a2294dab6291202009ce6fd2c773193e49d1b1baf32bc122fa04cd04
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              browser_assistant.exe
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\assistant\browser_assistant.exe
                                                                              • Size 5.3MB
                                                                              • SHA256 fdd6f367514a8c44bedd7d8cae73120bcab054975df41be2a38f082b9521746a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              opera_autoupdate.exe
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe
                                                                              • Size 7.3MB
                                                                              • SHA256 495c5ddc8f8465b17d0c30679d51f26a5f992287aedac8c6bac62ec8f1d00863
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              installer_prefs.json
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\installer_prefs.json
                                                                              • Size 1KB
                                                                              • SHA256 eaf3f35ad4dbfeca5617c12f8242cada20ea0eca7afbc48060d9252ecddce751
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              opera.exe
                                                                              • Path C:\Users\Admin\AppData\Local\Programs\Opera\opera.exe
                                                                              • Size 2.9MB
                                                                              • SHA256 a881c8dab332b019e97a6d65fe95c062ef9bd8e7b2b3b40d8069e19d5b2886e5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              Opera Browser.lnk
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\Opera Browser.lnk
                                                                              • Size 1KB
                                                                              • SHA256 e1fedff7c05075ca05f4080af02cf2fd0910bd07d2ed7a97c8c9e33739ea9ba6
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              additional_file0.tmp
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\additional_file0.tmp
                                                                              • Size 2.8MB
                                                                              • SHA256 71a4cc628fd1716fd994689c4808d2ebbc00e8bd2ecb7600b9921baa8916c752
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              assistant_installer.exe
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\assistant\assistant_installer.exe
                                                                              • Size 2.4MB
                                                                              • SHA256 63187b388e01fb05d8c29957e1c566324af67aff2f7a2e3da9132248c79375a8
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              dbgcore.dll
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\assistant\dbgcore.dll
                                                                              • Size 222KB
                                                                              • SHA256 7bb46348c2ec97ef9ee7a8e0ae28c8e069513e8acaee2689134a2d906b5fdecf
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              dbghelp.dll
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\assistant\dbghelp.dll
                                                                              • Size 1.8MB
                                                                              • SHA256 6fd2b4bfc275ed306ce09008ff8437818b3373e69e4b3db3cbb79be91b2b9308
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              installer_prefs_include.json
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\installer_prefs_include.json
                                                                              • Size 239B
                                                                              • SHA256 ad0a70852936dbf15eeb5accadd7acc1554959df5b85898911e4281e402e287a
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              installer_prefs_include.json
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\installer_prefs_include.json
                                                                              • Size 1KB
                                                                              • SHA256 b6d41822404fca9580b1e3196f612f500b016936282659e1c2176286f030c875
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              installer_prefs_include.json.backup
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\.opera\2c250570-00de-4232-ab27-a9be87602a8a Opera Installer Temp\opera_package_202607021335541\installer_prefs_include.json.backup
                                                                              • Size 224B
                                                                              • SHA256 f799101396e58ec98238b81669c288b0649788476fdc997cd029cfd5239c8aad
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              7d33b88f-6f61-4bc3-9b53-55ccc9b008f3.tmp
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\7d33b88f-6f61-4bc3-9b53-55ccc9b008f3.tmp
                                                                              • Size 14KB
                                                                              • SHA256 f1d24a67ce5aa49b3a6a207a0c49c636f0a5b4851ce493326c76a0b78eb7c545
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              installer.exe
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\7zS88348648\installer.exe
                                                                              • Size 8.3MB
                                                                              • SHA256 8a134a76b3ea979d3647853879db52b07bb5d1dff6249e8452e5d10d803d64ef
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              OpInst.exe
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\OpInst.exe
                                                                              • Size 3.1MB
                                                                              • SHA256 775523d41330011cd203f717b0bcaa6ab48f12a3db436600347c5bb22e658c7d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              bg.png
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\bg.png
                                                                              • Size 224KB
                                                                              • SHA256 5fa976ea5780439175bb696817cd6eab3625ba5ccfe5b220587130ed5e1da855
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              d426a6f0-b4ca-48ca-9b76-8ee2f478de21.tmp
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\d426a6f0-b4ca-48ca-9b76-8ee2f478de21.tmp
                                                                              • Size 2.6MB
                                                                              • SHA256 71c7a508f591d1771979df4fb400556c4df21d8937e017e322ee1c4749dda428
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              favicon_opera_one.png
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4032_1637035761\CRX_INSTALL\favicon_opera_one.png
                                                                              • Size 2KB
                                                                              • SHA256 44ee468b888578da502658d7f2b05b24d9034756701f49d762b00615f8da62f3
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              manifest.json
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4032_1637035761\CRX_INSTALL\manifest.json
                                                                              • Size 3KB
                                                                              • SHA256 64620e875ac18f8a5dfb0a403c8f9307a14c7f1b3278b7801bfa1c21f3365c71
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              service_worker.js
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4032_1637035761\CRX_INSTALL\service_worker.js
                                                                              • Size 74KB
                                                                              • SHA256 1480798b974b29c617d9ebb4b4408f1eea9febbcde0083373cf8d178dca1b6cb
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4032_1637035761\de932af914ba00303d4a2778a383ac9c831101e2.crx
                                                                              • Size 4.2MB
                                                                              • SHA256 9527f8a88118af8921b40c59fee22654dbf169a96d6a8febd2d0bb83363b1b4a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              manifest.json
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7260_2002203526\CRX_INSTALL\manifest.json
                                                                              • Size 1KB
                                                                              • SHA256 8fb5674e49dc503b27e5959880938cd58ac16b8b1b96cb5e5274dcd88c9ea31f
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              manifest.json
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7260_2002203526\CRX_INSTALL\manifest.json
                                                                              • Size 1KB
                                                                              • SHA256 028acb85f69bedc88c9f9ce97bf0c31615f83032d90de1b7017614a389648b71
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              Icon_Light_Neutral.png
                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7260_2110294747\CRX_INSTALL\icons\128\Icon_Light_Neutral.png
                                                                              • Size 2KB
                                                                              • SHA256 ec33dffd3fdb927141385a8c8eefb5fdfbd6dec9b50dfa02d66aa6377342bce2
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              settings.dat
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Crash Reports\settings.dat
                                                                              • Size 40B
                                                                              • SHA256 083d385f0551b9843788b9c0dccb065253026dfca115d0e23199071e7a2f498b
                                                                              • MD5 SHA1 SHA512
                                                                              Submit Download

                                                                              03bb57f3-99e8-4009-b3e7-f7e7a406fa71.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\03bb57f3-99e8-4009-b3e7-f7e7a406fa71.tmp
                                                                              • Size 10KB
                                                                              • SHA256 a82e614046d1666ceb2bea4db7d5927b08a44330b14ce61910c95e2611f043e1
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              0f63f2f2-74e1-4792-b8fd-44c7d5c3ce06.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\0f63f2f2-74e1-4792-b8fd-44c7d5c3ce06.tmp
                                                                              • Size 435B
                                                                              • SHA256 e4cce364e26c03b287e61b3202c3d675fd166eb3fa764460caf7d6b93008377e
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              4688f003-0f33-4914-bf0b-5acb4272a1d7.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\4688f003-0f33-4914-bf0b-5acb4272a1d7.tmp
                                                                              • Size 171B
                                                                              • SHA256 d5bee7176fd3da082dfc8f5bdced2573181ec1506bc55cbe19adac356755df75
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              4efd9686-43ac-45d2-969e-f55f388c45ea.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\4efd9686-43ac-45d2-969e-f55f388c45ea.tmp
                                                                              • Size 6B
                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                              • MD5 SHA1 SHA512
                                                                              Submit Download

                                                                              6680f120-bded-405d-a22c-29d02759dc8b.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\6680f120-bded-405d-a22c-29d02759dc8b.tmp
                                                                              • Size 607KB
                                                                              • SHA256 ebc7ca025edf5d614bd694ede3a01eb50197811f5aa9ec79511efb38b68730f8
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              Bookmarks
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Bookmarks
                                                                              • Size 36KB
                                                                              • SHA256 7b48f1413b523ce6162a3b61db7088fc4b04b83e9007639cd7dca29eb750d78c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              BookmarksExtras
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\BookmarksExtras
                                                                              • Size 242KB
                                                                              • SHA256 0615d6e70ce4b86c5ae988c13934c8ba282ee9773ae53b053f47f4018e170de8
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              70e3bee1-e91f-4ad2-9856-f4f4ce0e08aa.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\70e3bee1-e91f-4ad2-9856-f4f4ce0e08aa.tmp
                                                                              • Size 48B
                                                                              • SHA256 30b4d7cc4408489b09bf457dcbc57f7f83c1b4d4be9ef9d2360ba250c4da2bd9
                                                                              • MD5 SHA1 SHA512
                                                                              Submit Download

                                                                              the-real-index
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Code Cache\js\index-dir\the-real-index
                                                                              • Size 264B
                                                                              • SHA256 4161eeef5c920fa76086b6232709c494b78c0794f8cfd05b59322f67829ca2c1
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              data_0
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_0
                                                                              • Size 8KB
                                                                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                              Submit Download

                                                                              data_2
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_2
                                                                              • Size 8KB
                                                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                              Submit Download

                                                                              data_3
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\DawnGraphiteCache\data_3
                                                                              • Size 8KB
                                                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                              Submit Download

                                                                              reader_mode.js
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir4032_672652185\CRX_INSTALL\reader_mode.js
                                                                              • Size 112KB
                                                                              • SHA256 2351bf9735cdb0eb1aeb738cf596ec80a063f47447c9cba68da963c644e7d0ea
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              spotify_frame_interceptor.js
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\Temp\scoped_dir4032_672652185\CRX_INSTALL\spotify_frame_interceptor.js
                                                                              • Size 5KB
                                                                              • SHA256 efc95edf1976955e0aaad47bd2e84951c0fb06f18f8b1c09646f0c950d60d4cd
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              cos-bridge.js
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-bridge.js
                                                                              • Size 173B
                                                                              • SHA256 0c4209fe6d13d432cc0035b20f1eb58159ed23bda2417c07f9e8fed079414025
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              cos-content.js
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\cos-content.js
                                                                              • Size 502B
                                                                              • SHA256 e3b30cd7ca6d753dcf9fe91f9c1fb4eeae7b9dc00eebf87f5f24e2316b76390f
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              main.js
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\enegjkbbakeegngfapepobipndnebkdk\1.4.5_0\main.js
                                                                              • Size 47KB
                                                                              • SHA256 4c2cc909a2d1ca6b84270a6329e81f0f1de229ce49fd9412033a5c45e1d2e72f
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              favicon_opera_one.png
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\jifbgnmbgbdiedhdecealmlgmekpagde\9.49.0.1_0\favicon_opera_one.png
                                                                              • Size 2KB
                                                                              • SHA256 7020bcd4e2443007b9ffd23d100268d114da2768e9c2ab99d0d4fcbafbcfa662
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              background.js
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\background.js
                                                                              • Size 86KB
                                                                              • SHA256 bc24cb72eda19eaf9ee195f014bd6247e826cc594e73461b826c6bd0d5f50dce
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              Icon_Light_Neutral.png
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\icons\128\Icon_Light_Neutral.png
                                                                              • Size 2KB
                                                                              • SHA256 219a18e24c4050669e1c65581aa55807aeddbe9169d13db3421b1f1bad8508c1
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              popup.js.LICENSE.txt
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\popup.js.LICENSE.txt
                                                                              • Size 1KB
                                                                              • SHA256 f10ea2db0cc0b4c4a316d6a4fb23dd6e2f19f5eb215fdbfd1709d7f2c233df8c
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              rules.json
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Extensions\ompjkhnkeoicimmaehlcmgmpghobbjoj\4.1.11_0\rules.json
                                                                              • Size 839B
                                                                              • SHA256 2693069fe851c816f327b4cd2c5ff1bd11024b04033df827330a6fcb48cb1bf6
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              1315ba2a-740a-43c9-a237-cc3ce631dd01.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\1315ba2a-740a-43c9-a237-cc3ce631dd01.tmp
                                                                              • Size 27KB
                                                                              • SHA256 1c2d3bd473e1870389f6737747a94d5e852790d686cf91b5e22ad83b190eefa3
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              5ce9afd4-131f-4dd3-b6ed-62e41c8fe087.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\5ce9afd4-131f-4dd3-b6ed-62e41c8fe087.tmp
                                                                              • Size 27KB
                                                                              • SHA256 db83741aada0665e563ed2965b9f1787d9503733f407658b5bd72a46e3b6e91d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              79ed957a-6aca-4729-9343-2d6696aff0d9.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\79ed957a-6aca-4729-9343-2d6696aff0d9.tmp
                                                                              • Size 27KB
                                                                              • SHA256 1b6cb01715a2de1373f9f3e194921621463532558767bb5d6e1902e9b368ca5c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              a7c88faf-3a68-47c8-b997-09bf4481e329.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\a7c88faf-3a68-47c8-b997-09bf4481e329.tmp
                                                                              • Size 27KB
                                                                              • SHA256 09b4f9a23cfa587b071052ac7cd4803139d3f1775a11b4c552b92472d857f460
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              e0dd38b4-3d33-419d-af76-e2de32f172f5.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\e0dd38b4-3d33-419d-af76-e2de32f172f5.tmp
                                                                              • Size 27KB
                                                                              • SHA256 aaa2c3089c7623aefb9025744747ec651dfa14d9decbe63ce941785b4202f1e6
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              e5d9f657-8d9f-4079-9cf1-552221c86ae7.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Jump List Icons\e5d9f657-8d9f-4079-9cf1-552221c86ae7.tmp
                                                                              • Size 27KB
                                                                              • SHA256 c5b282a24d9ef3ca8b9ec9a229d76f55e76c8765f3d55b13ae9d0f6501c7b0fd
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              Network Persistent State
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\Network Persistent State
                                                                              • Size 111B
                                                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              f2218472-2a63-4902-8cea-5c704e6b587d.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Network\f2218472-2a63-4902-8cea-5c704e6b587d.tmp
                                                                              • Size 2B
                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                              • MD5 SHA1 SHA512
                                                                              Submit Download

                                                                              Preferences
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                              • Size 15KB
                                                                              • SHA256 d3c7629794d9d52b6c2e521565d994e9abbf0d0140c16b976b03cccaee954c9e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              Preferences
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Preferences
                                                                              • Size 14KB
                                                                              • SHA256 9b5f4f1b5d3fdc935204a265c82272dcd3af943e9cf6074b453381e530156fa0
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              Secure Preferences
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                              • Size 112KB
                                                                              • SHA256 34a29f9b218229951978f2ec7a8ba0c60a6b42d5e6c1424c896ff50052f266a3
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              Secure Preferences
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Secure Preferences
                                                                              • Size 87KB
                                                                              • SHA256 7dfe76c647fa1152dba0623718997a4bee64db237493b783331c6dc0ef547c08
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              441790fc-9ed8-4489-84b3-eee3da1101fa.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\441790fc-9ed8-4489-84b3-eee3da1101fa.tmp
                                                                              • Size 72B
                                                                              • SHA256 e9bd3e2abad2086a4fdec79b9dd89c20b02d3e36acb62f77e60f0c4644f99330
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              the-real-index
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                              • Size 48B
                                                                              • SHA256 75fcdd2afdddeaeedcece8963232cd954b6ad33bdbd148a1f6f61b38bcead866
                                                                              • MD5 SHA1 SHA512
                                                                              Submit Download

                                                                              f5c7e2ac-7e76-4aba-aaf2-c06889185b7f.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\f5c7e2ac-7e76-4aba-aaf2-c06889185b7f.tmp
                                                                              • Size 381B
                                                                              • SHA256 bff4c4bbbee8cc8cdc845a39d5b49bccbe0dc162792b8e4e8370edaa609f01a6
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              febb3e92-0880-469d-9abb-4d8f1a6b21c3.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\febb3e92-0880-469d-9abb-4d8f1a6b21c3.tmp
                                                                              • Size 381B
                                                                              • SHA256 c4e985c7d5d55748f20ba2ebdcdc6f6f1fd1d06366d8b1fff2f827904fe9e49f
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 11KB
                                                                              • SHA256 5a6f70995479338144e5cc37f2592528a8aa34d01a17bb3f11bd5e66b8256ab9
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 11KB
                                                                              • SHA256 79bbd4298c40323e986fb079b125d7f90f9510dd48d0043b7f273ac999658931
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 db286806b276e429a2a5debdca793f80e96529ffde956848b0250fab9275523d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 904ff8951a42dbbe0ee40c1c2bf84926198360fc82785fe7f054f9b467c1ac15
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 9KB
                                                                              • SHA256 cbdf0c399f10c354980d9267b06c1c9923971d09aa8ecbb77aa599ad1aa33a5b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 9KB
                                                                              • SHA256 ad4f9e3cbdc4ff314713137808dccb4203145e7a0e3eaffe8a7926b68362c1c9
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 8a2368c3312f01b639c70dd152b362d7927cc8792ee9a2bd3de949d9c6d0b51c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 11KB
                                                                              • SHA256 5cff640c07250e38363c687357bf1dcc151a3b452aa2ccad16877b8192b80789
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 11KB
                                                                              • SHA256 bbe98bd035b592c4ff260fd15da0edbea9ac4b9f8ce805af47c800872c842a86
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 11KB
                                                                              • SHA256 ea93eef074abffa073ae7078e16deda5683e52688d2d26f681eb537a7a014eee
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 11KB
                                                                              • SHA256 5655774db559e22922d3b842e8d8aa2f81e9fd0f315d3e781eefad243ec8dce3
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 11KB
                                                                              • SHA256 49caf467154627dd5d0892fe6de99260b29c28fa1905db5776573918ba5e273d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 11KB
                                                                              • SHA256 4ff3f2bad742e46932afa7155b656d6a48a87f43c4bccc96e92e6d4eda0b1eb7
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 11KB
                                                                              • SHA256 f18fc4fb71809a53cdf8bd7087a43b97c3dd3267838c71a63ac393a6cf026b76
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 11KB
                                                                              • SHA256 f80cc6135d68668434ef4707cf11fc0c3ef10ece8c7bac7e93fae3c9e6532f27
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 11KB
                                                                              • SHA256 48515dd0ee6ce6ef53a3fceb3bf24b693b56408e4f0052ebddc2306a07146b8c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 11KB
                                                                              • SHA256 697ba4d3866e373b2ee4b23f6761b81429d5a6cb59864d1a885bfd48251e7929
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 11KB
                                                                              • SHA256 50e676aeec6b513a70cab1611f801544882ce4233663b05c8953f0601ed428b3
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 12KB
                                                                              • SHA256 99089eb90cf293dd5cef6a09db7e592fd8bc261b48721a94c97446a76839c9c6
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 1KB
                                                                              • SHA256 23db29b42a93c5e78b4e58dfd3cb405f679feed5b2b3578bca0647e4abbf7bbf
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 1KB
                                                                              • SHA256 edb954e6929155e1ee7364bfb5a2d8f616c17e021ddc879d4b31d971ae9f646a
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 8KB
                                                                              • SHA256 ecd820cf0ac52df968a3a2849a7c207b944c78ac02a34ba87ccd0a312e9c9782
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 8KB
                                                                              • SHA256 057985b0434a5accf57e701c10f0dfa3dd25ed15d8961513d3af526df89a3062
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 9KB
                                                                              • SHA256 89936e54c34f4428de4f9c7144a51bf589455a89f862c188d9f21fd5eaddce64
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 191fa526b2712ba8ef29d4409f9d1e5079149f1fb00ee635f2f12573d93829ef
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 493B
                                                                              • SHA256 b8f826eb6c2a5a89b871d792ea87caf921a84e6ac542c96af42ecafb035a7385
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 621B
                                                                              • SHA256 a200baa1e41d71a9268f890a4ded43fa1b78dfd29d7ee9501225360b094ddba1
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 733B
                                                                              • SHA256 936c244f53dc6bc5a1e38e36bc49a46102ef31bddbf0886e7483c89f80750be6
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 909B
                                                                              • SHA256 f96b329c760323f0540e9b3dbb56f49d579d5dcd21d596bddb63f42a2946245a
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 957B
                                                                              • SHA256 fb47f18da23d25e8f10781598f3b18e9188e3aad4bf8b929f042915a5401767e
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 1KB
                                                                              • SHA256 8d467289be18767914378e30d72a5abdaf9a2bc4e457f657c981f7ca6ee335c1
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 1KB
                                                                              • SHA256 cd26869e1423904f6faf439b576e2f1d9e8371c4068be621c189ffb2625d29f4
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 1KB
                                                                              • SHA256 c77e60d622002ddba3fb3a743ac57a5ee6639068f7f719b458eb752ad72c1da4
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 1KB
                                                                              • SHA256 69db0f499917eb5a340d5eb519470cdf439c66a575ddbed6764d2a7d9f6bbd67
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 1KB
                                                                              • SHA256 88257962111df694a27925390c60c09a339d88a3838c65ee9fb4d9f587e94b9e
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 1KB
                                                                              • SHA256 3788a35b6167d98dbdb1fc6c6ac1c2c3dfe887d049098578d055760493150d94
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 1KB
                                                                              • SHA256 e6c11c5dc70f22929d8c8714709ba46f4cf45ef167ff01fa4f3e344faba62954
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 1KB
                                                                              • SHA256 2e60a3feecdd90e000f5cf3b4760f04381d5045309dabade6873ce5dd0e1cd70
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 1KB
                                                                              • SHA256 32b4bf23b176e1ccb0bed988470d895185c3714e815a2b9ebbe72a7271c9a77d
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 2KB
                                                                              • SHA256 0ed77d3d004c368bdaaad7e2d1e030de1833d6d673ed75de59f33ce681dd4686
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 6KB
                                                                              • SHA256 a9c654f08c5297b2cbf09666fd256b490a811f8a59966b7e7fc232d2af60fa2e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 8KB
                                                                              • SHA256 bdce27d54b926e8271fc537ab6898572dcca95c5d3a430fadd478cf5962f2488
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 ea54ce6dd03a4055b81b81b13cd067d6679ccbc72678868d88acf5fb6d7dca0d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 79f41e94ca09e742ca7812b6732aaae5f658e7d69f19bc9efd4bea87b44c6841
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 d0285c3868fd75b7f8fde77dbc3d47a422a6092ad7be6653b612287b7718a990
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 a13064c31c2151c1545f065b104e09acc5de40aa9d6224e4094a706cfacc6b32
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 1767e2c40ce8f2d96dc6ff851a180acbb433c1fb55e71e8174446dd7f7ede53a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 73281f3334c8d4a018ce29122ad08bba5e7a0e38c5631e40bfaa20387b50e292
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 16127c3c4288c93bb7d92c2e2e3faca419a23149c3440e10b970c450461947c5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 c3da58afd649a808f223a6377b08e1c4e0fd5b9ab8859325aed03d477108a89b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 8KB
                                                                              • SHA256 9d87efb19c0bba26c1a4568501a5096303c0142ddb4040224ffbb00b54b6aef4
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 8KB
                                                                              • SHA256 f0bfd2655dcecc7564d1d344a2c2c41860ac9988e4477982fa115e385ac3e8e0
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 8KB
                                                                              • SHA256 44b3a9f35449db77973b07149864c800c1662bd15b4189b5463ed74fcf5dad0e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 9KB
                                                                              • SHA256 3f8f5f539af3247547e42159be3a57bbe00dc41b2b7edfc6dc974c28c3345397
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 7KB
                                                                              • SHA256 d448024208cd2eed2c2cdb95d19f207869b17cd7a8981e10a522f9cf892b3511
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 8KB
                                                                              • SHA256 c4355c275144d1bce45d23210c438d459d982cb63e1be95baf264ce1b25ae188
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 b46f581a5a0efd377661e8986df3e195e6fe48e7751bcafdbca5e53af7f31f8e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 2540d090d5fba0158ded0c6c3b08a8d5f8a9f36d8f5733bbdb6c633e70011f49
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 12KB
                                                                              • SHA256 e994ccb3692ad72128d2d23178a2e725eec4e3e4cabb443a8b90b6e30b73195c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 8KB
                                                                              • SHA256 bc1a5d4febd66e0771823f4a2a03fe1d464f59e843d846ecb3126f0134dc8614
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 9KB
                                                                              • SHA256 01853a15611417d9ba78df9651412bfa1721e87b48a20ed50e09ec883aa51973
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 9KB
                                                                              • SHA256 4efe2876b5df7465bd82c9473dc71087e6b81cebc3ac9dd37555dda67765869e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 804876122fcd7565d790671cec43d61bc8f261db18675fecfc60975b1888c368
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 12KB
                                                                              • SHA256 332b21a60264b676025b9667646dbdb80e88fda4c97fb6355c7eb49a7a810a4b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 8KB
                                                                              • SHA256 f7324863500fe804af210712fb27afbfcf85d3706360c41ae519e0bcb6c5d346
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 8KB
                                                                              • SHA256 b527bc2c05fad21ab518c6e663ad7249006341239b40884787b17dc898667d25
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 9KB
                                                                              • SHA256 00e0ffd91615a750dc3e9dc4f02503896d3333f82f234244c0c32b3e1e9f9205
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 d2d3583e2bf80f9e22d7e9d53af094ab048a2ed6bb7f8ad8d54171c698d170ba
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 9KB
                                                                              • SHA256 8518d5446622f5716dcf6f46a6ae4df2a82f45fc0643bca84fa0c9179762c6a3
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_c3332b52-4205-49c4-8104-cc8aeca804ed.raw
                                                                              • Size 10KB
                                                                              • SHA256 f354fefafe8392955667dd8a4dde6ea5fb517dd91d18be45460a0e5c216a0bb5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                              Submit Download

                                                                              session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Size 1KB
                                                                              • SHA256 c5659dd9c88f8a91f3b04450747f2781874d448f22e59362eed4fb4a94a0d099
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Size 605B
                                                                              • SHA256 00c109e972d7203f8d5977d574fd4523aea1be16bb504c3bd054b0da26b81ada
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Size 493B
                                                                              • SHA256 fe2b896a9a22462152b0d72226671d6ff10fbf1e216c66c8d56e1831f17a977b
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Size 765B
                                                                              • SHA256 80a47202925f775a580571e475bdda87dd105ebff7d4f45692bf04372c816d3b
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Size 781B
                                                                              • SHA256 c15bb6a92700c2b64efaeffe312e5afbe0335a43837a1f20e03015b6c4a98196
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Size 781B
                                                                              • SHA256 6d2c3c3fe9b1c1f6b02a78fe18479af60d7cbb63bdaec7bcd0062b41d75c47c6
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Size 957B
                                                                              • SHA256 42617426238041933e4798d45d37b794217d0f8d0333761d8cad8f3958b0c138
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Size 1KB
                                                                              • SHA256 0ba0beb941ae415ad44d538ae62ef128307daffe1a7515d6b78ca4da60689aee
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Size 1KB
                                                                              • SHA256 8f73a8665f10c9d2cd6cfd40c5aa3a5cb0e1fe419478fef6bd5967f9d98fc6fd
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\StatsSessions\session_ed618edc-4d65-4da8-9309-48936031b791.raw
                                                                              • Size 1KB
                                                                              • SHA256 a003a0717a6badcbf591f815d88be34fe57673995974116691a56c22bb2f5c13
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              CURRENT
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\Sync Data\LevelDB\CURRENT
                                                                              • Size 16B
                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                              • MD5 SHA1 SHA512
                                                                              Submit Download

                                                                              d8ceef44-df0d-4be3-a200-08612eaeaa5c.tmp
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\d8ceef44-df0d-4be3-a200-08612eaeaa5c.tmp
                                                                              • Size 203B
                                                                              • SHA256 1606ac8e94c531364ecceff9de9093886492d14a9f9837a267f9245987ef3d96
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              MANIFEST-000001
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\shared_proto_db\metadata\MANIFEST-000001
                                                                              • Size 41B
                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                              • MD5 SHA1 SHA512
                                                                              Submit Download

                                                                              ssdfp4032.0.1336035206
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4032.0.1336035206
                                                                              • Size 265B
                                                                              • SHA256 89fcc4d85806c2d2d656bb3be5623a001ea5ceed3702bcccd9e90d81b2c59f0a
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp4032.0.1336035206
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4032.0.1336035206
                                                                              • Size 2KB
                                                                              • SHA256 9b196321876631d49d6ccf175d18c5ab35f4baf97edeadf5ae1c6f0d53b0da74
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp4032.0.1336035206
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp4032.0.1336035206
                                                                              • Size 1KB
                                                                              • SHA256 2c2992397ef669ec4f9459f8c689cd70261accbf50eb3f78e2a72988856c2113
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.0.42541878
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.0.42541878
                                                                              • Size 595B
                                                                              • SHA256 6bb56c8c2cafbb402d818d545d6775fff089156411a15d0107810822e1ce819b
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.0.42541878
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.0.42541878
                                                                              • Size 3KB
                                                                              • SHA256 1686a76e85fd74445c2a89e1055fca781d4ceacf89ef218e6924a793b948e120
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.0.42541878
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.0.42541878
                                                                              • Size 2KB
                                                                              • SHA256 56ea01a06734faee6ec5574645e3aa56a62891e55cecc4ca4b4879365e0eb57e
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.0.42541878
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.0.42541878
                                                                              • Size 2KB
                                                                              • SHA256 17820ce3b00197a1a2f6b7b2c50a5ed26d2a05f088c21a03025a503dbc9ac831
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.0.42541878
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.0.42541878
                                                                              • Size 3KB
                                                                              • SHA256 9807186b92debf99d0174f486545d959845b467203bfa788eace78f4b1dcb14d
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.0.42541878
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.0.42541878
                                                                              • Size 3KB
                                                                              • SHA256 84d1bdfebc31399793c672bb218e99333951da26c2c5dc7a79f4755a663cf526
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.0.42541878
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.0.42541878
                                                                              • Size 3KB
                                                                              • SHA256 d7a1314ec06f2fcaa06ffe660fde63d3c6419d8c32c84434d256d55932c97504
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.0.42541878
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.0.42541878
                                                                              • Size 3KB
                                                                              • SHA256 07b496b2032fb46c20328111bd4f05786c09b571478885fb483611e066288ac0
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.0.42541878
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.0.42541878
                                                                              • Size 533B
                                                                              • SHA256 18d1e693fc65a31a381b7a272e7616d3ae098b2e22197e1525a67f3621b8ad39
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.0.42541878
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.0.42541878
                                                                              • Size 2KB
                                                                              • SHA256 2bee5556216e9ccab9bdd0ce4d6a63dc5d73244232b9e076bf6cae82cd5c6710
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.0.42541878
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.0.42541878
                                                                              • Size 1KB
                                                                              • SHA256 1638a2a91b13ac6ca764432838df30595de14e1c516d7703395ad1d2d48b7640
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.1.416803417
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.1.416803417
                                                                              • Size 448B
                                                                              • SHA256 2ef7d5a6b3e3fc1cb2c4b65cd67ad166b1a9a372cd4510970f54b7a916f5976c
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.1.416803417
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.1.416803417
                                                                              • Size 1KB
                                                                              • SHA256 da5cb4ea4d68b60f9d6abc84d3f120df7ef6c0c20643b76af7079340d33208ff
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.1.416803417
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.1.416803417
                                                                              • Size 1KB
                                                                              • SHA256 508af35ebcd8d76e8ac139c6671a59422a6fcd8c1e774b0f69a474cca8d87a16
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.1.416803417
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.1.416803417
                                                                              • Size 1KB
                                                                              • SHA256 a72aee28bf090c323e6051b5c1ff8eae958dfff9b87ac328067f1f001b2645e4
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.1.416803417
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.1.416803417
                                                                              • Size 546B
                                                                              • SHA256 66a3371eb10b4e163498aab85d00a7e369e42ffd70db6506cb81e186b9ae79d3
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.1.416803417
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.1.416803417
                                                                              • Size 636B
                                                                              • SHA256 44f2c89fcbb3d0ea9ac06b789eab568db534164a06f17dde8a07fca9b8b3ee96
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.1.416803417
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.1.416803417
                                                                              • Size 723B
                                                                              • SHA256 6981b1ad3505095ccefe8150e2b318442c61705ab623ef1506d5b50e5634e0e5
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.1.416803417
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.1.416803417
                                                                              • Size 817B
                                                                              • SHA256 ac2a71d4bb68a900d33f38151366db4ba0edaa8c075ab96523a6029f4fc91a8b
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.1.416803417
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.1.416803417
                                                                              • Size 913B
                                                                              • SHA256 691a6b21070a3d12a69e7f112ea9b023fd44a2615ae1bf0daf6f713fc94ca9a7
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.1.416803417
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.1.416803417
                                                                              • Size 355B
                                                                              • SHA256 353cea2c12cca96926e16985852263ca103649dcb42d25fa16f001a3b929950d
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.1.416803417
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.1.416803417
                                                                              • Size 1KB
                                                                              • SHA256 528f1fb9835aa384770c1c399dd5167a714ba0c2bf0b585bba51a5eab438a2d4
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.1.416803417
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.1.416803417
                                                                              • Size 200B
                                                                              • SHA256 4c005828a5f9e1aed1f79620712a1bcacf4d38c6bf7919e712d9b0aaa1525c11
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.1.416803417
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.1.416803417
                                                                              • Size 1003B
                                                                              • SHA256 8a664ee5d6a7b77e8ed230851167dd336b19eab5f6f409bd9846d420dbbb2be3
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              ssdfp7260.1.416803417
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Default\ssdfp7260.1.416803417
                                                                              • Size 1KB
                                                                              • SHA256 8c5d9b5c0a43034e497a11afad74e48dffad5a7813d17c18d95eada42aeab5a7
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              data_1
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\GrShaderCache\data_1
                                                                              • Size 264KB
                                                                              • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                              • MD5 SHA1 SHA512 SSDEEP
                                                                              Submit Download

                                                                              Local State
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                              • Size 3KB
                                                                              • SHA256 3fb30a9d633396adfe87a9990f479c405c534c82fbb7dd4bc4aa26b9b2eb26a2
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              Local State
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\Local State
                                                                              • Size 3KB
                                                                              • SHA256 f81c347248e4ce061d8e655ba204161ad4a736dc2a23d3314b2d6e94d1abd2aa
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              assistant_prefs.json
                                                                              • Path C:\Users\Admin\AppData\Roaming\Opera Software\Opera Stable\assistant_prefs.json
                                                                              • Size 151B
                                                                              • SHA256 d25b4147f1e37b7e51b43fdcec1dcbab9760be2ce75184dee1f58c253e9e6ec9
                                                                              • MD5 SHA1 SHA512 TLSH
                                                                              Submit Download

                                                                              memory/240-2241-0x0000019344CC0000-0x0000019345CC0000-memory.dmp
                                                                              Download

                                                                              memory/944-959-0x000002BD1D940000-0x000002BD1E940000-memory.dmp
                                                                              Download

                                                                              memory/1280-2237-0x0000018D57AA0000-0x0000018D57C4C000-memory.dmp
                                                                              Download

                                                                              memory/1280-578-0x0000018D57C50000-0x0000018D57C51000-memory.dmp
                                                                              Download

                                                                              memory/1504-2263-0x000002D41FB80000-0x000002D41FB81000-memory.dmp
                                                                              Download

                                                                              memory/1624-2277-0x000001F9F9B70000-0x000001F9F9B71000-memory.dmp
                                                                              Download

                                                                              memory/1744-2536-0x0000020D9DAF0000-0x0000020D9DAF1000-memory.dmp
                                                                              Download

                                                                              memory/1752-1565-0x00000186CDF80000-0x00000186CEF80000-memory.dmp
                                                                              Download

                                                                              memory/2044-3207-0x000002C701520000-0x000002C7016CC000-memory.dmp
                                                                              Download

                                                                              memory/2044-2267-0x000002C7016D0000-0x000002C7016D1000-memory.dmp
                                                                              Download

                                                                              memory/2144-3206-0x00000283E3980000-0x00000283E3B2C000-memory.dmp
                                                                              Download

                                                                              memory/2144-2275-0x00000283E3B30000-0x00000283E3B31000-memory.dmp
                                                                              Download

                                                                              memory/2208-2849-0x0000021A43EC0000-0x0000021A4406C000-memory.dmp
                                                                              Download

                                                                              memory/2208-2273-0x0000021A44070000-0x0000021A44071000-memory.dmp
                                                                              Download

                                                                              memory/2396-2585-0x000001A242320000-0x000001A242321000-memory.dmp
                                                                              Download

                                                                              memory/2500-2378-0x000001BBCFF50000-0x000001BBD0F50000-memory.dmp
                                                                              Download

                                                                              memory/2524-2613-0x0000018855210000-0x0000018855211000-memory.dmp
                                                                              Download

                                                                              memory/2616-2271-0x000001C77FA30000-0x000001C77FA31000-memory.dmp
                                                                              Download

                                                                              memory/2616-3205-0x000001C77F880000-0x000001C77FA2C000-memory.dmp
                                                                              Download

                                                                              memory/2812-2599-0x000002B969040000-0x000002B969041000-memory.dmp
                                                                              Download

                                                                              memory/2928-2266-0x0000025AB9A80000-0x0000025AB9A81000-memory.dmp
                                                                              Download

                                                                              memory/3344-2527-0x000001331D9F0000-0x000001331D9F1000-memory.dmp
                                                                              Download

                                                                              memory/3736-2608-0x00000187EFFD0000-0x00000187EFFD1000-memory.dmp
                                                                              Download

                                                                              memory/3996-2593-0x0000028996960000-0x0000028996961000-memory.dmp
                                                                              Download

                                                                              memory/4032-2244-0x000002F88AEF0000-0x000002F88BEF0000-memory.dmp
                                                                              Download

                                                                              memory/4448-2238-0x000002147FA70000-0x000002147FC1C000-memory.dmp
                                                                              Download

                                                                              memory/4448-630-0x000002147FC20000-0x000002147FC21000-memory.dmp
                                                                              Download

                                                                              memory/4720-2617-0x0000013B480B0000-0x0000013B480B1000-memory.dmp
                                                                              Download

                                                                              memory/4796-2595-0x000001EAE53F0000-0x000001EAE53F1000-memory.dmp
                                                                              Download

                                                                              memory/5044-436-0x00000150ADDF0000-0x00000150AEDF0000-memory.dmp
                                                                              Download

                                                                              memory/5052-2239-0x0000026B268A0000-0x0000026B26A4C000-memory.dmp
                                                                              Download

                                                                              memory/5052-976-0x0000026B26A50000-0x0000026B26A51000-memory.dmp
                                                                              Download

                                                                              memory/5204-477-0x0000024FD8D90000-0x0000024FD8D91000-memory.dmp
                                                                              Download

                                                                              memory/5204-476-0x00007FF908D90000-0x00007FF908D91000-memory.dmp
                                                                              Download

                                                                              memory/5204-2240-0x0000024FD8BE0000-0x0000024FD8D8C000-memory.dmp
                                                                              Download

                                                                              memory/5240-2611-0x0000020BE5880000-0x0000020BE5881000-memory.dmp
                                                                              Download

                                                                              memory/5288-628-0x000001728DD40000-0x000001728ED40000-memory.dmp
                                                                              Download

                                                                              memory/5312-2269-0x000001E7AD680000-0x000001E7AD681000-memory.dmp
                                                                              Download

                                                                              memory/5504-506-0x0000028AE6260000-0x0000028AE7260000-memory.dmp
                                                                              Download

                                                                              memory/5768-2251-0x0000028F82EB0000-0x0000028F83EB0000-memory.dmp
                                                                              Download

                                                                              memory/5768-2619-0x000001D926BC0000-0x000001D926BC1000-memory.dmp
                                                                              Download

                                                                              memory/5788-440-0x000001D200000000-0x000001D201000000-memory.dmp
                                                                              Download

                                                                              memory/5796-811-0x0000020E12290000-0x0000020E13290000-memory.dmp
                                                                              Download

                                                                              memory/5800-2178-0x000001E827280000-0x000001E828280000-memory.dmp
                                                                              Download

                                                                              memory/5976-2534-0x0000028CA4570000-0x0000028CA4571000-memory.dmp
                                                                              Download

                                                                              memory/6080-2176-0x0000026D85690000-0x0000026D86690000-memory.dmp
                                                                              Download

                                                                              memory/6220-2591-0x00000220AFC40000-0x00000220AFC41000-memory.dmp
                                                                              Download

                                                                              memory/6296-2097-0x000001AC80000000-0x000001AC81000000-memory.dmp
                                                                              Download

                                                                              memory/6400-2615-0x000001ECCC1A0000-0x000001ECCC1A1000-memory.dmp
                                                                              Download

                                                                              memory/6776-2688-0x000002322F3C0000-0x000002322F3C1000-memory.dmp
                                                                              Download

                                                                              memory/6788-2686-0x000001DCD25E0000-0x000001DCD25E1000-memory.dmp
                                                                              Download

                                                                              memory/6808-3186-0x000001FE693F0000-0x000001FE693F1000-memory.dmp
                                                                              Download

                                                                              memory/7020-3136-0x00000158A9840000-0x00000158A9841000-memory.dmp
                                                                              Download

                                                                              memory/7248-2168-0x000002273B950000-0x000002273C950000-memory.dmp
                                                                              Download

                                                                              memory/7260-2515-0x000002C6B4840000-0x000002C6B5840000-memory.dmp
                                                                              Download

                                                                              memory/7648-2519-0x0000024752E20000-0x0000024752E21000-memory.dmp
                                                                              Download

                                                                              memory/7656-2590-0x0000027E19660000-0x0000027E19661000-memory.dmp
                                                                              Download

                                                                              memory/7696-2521-0x000002B1C5DC0000-0x000002B1C5DC1000-memory.dmp
                                                                              Download

                                                                              memory/7744-2525-0x000001A3EA540000-0x000001A3EA541000-memory.dmp
                                                                              Download

                                                                              memory/7832-2523-0x00000222CCE30000-0x00000222CCE31000-memory.dmp
                                                                              Download

                                                                              memory/8020-2694-0x000002588E480000-0x000002588F480000-memory.dmp
                                                                              Download

                                                                              memory/8028-2699-0x000001FE45600000-0x000001FE46600000-memory.dmp
                                                                              Download

                                                                              memory/8140-2601-0x0000029C1A2A0000-0x0000029C1A2A1000-memory.dmp
                                                                              Download

                                                                              memory/8144-2597-0x0000021A810A0000-0x0000021A810A1000-memory.dmp
                                                                              Download